--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225"} {"level":"debug","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ebf687e1571a7490784e49aec16895b51308a30d1643cf9615e4e787b400a00"} {"level":"info","ts":"2026-07-06T22:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225"} {"level":"info","ts":"2026-07-06T22:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a31b9f1765cc334b79c8729b00f4f673ae8d54791f0b5682454687c567283a5f"} {"level":"info","ts":"2026-07-06T22:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c54cf1cb9366b9138fdd6f52ba0713e0f62b121aadcca2a90a3c73b3c751c35"} {"level":"info","ts":"2026-07-06T22:53:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ebf687e1571a7490784e49aec16895b51308a30d1643cf9615e4e787b400a00"} {"level":"info","ts":"2026-07-06T22:53:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf11875057bb0d8ac89ef657a2b5979cc8a8140e01198805bd37e4d0e9b2225"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"error","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3"} {"level":"error","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"} {"level":"error","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"} {"level":"info","ts":"2026-07-06T22:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866"} {"level":"error","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92"} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35350","PortSpecifier":{"PortValue":35350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a11d947-f877-4305-b008-7988fa8af5f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35350","PortSpecifier":{"PortValue":35350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378533,"nanos":754196261},"http":{"id":"6a11d947-f877-4305-b008-7988fa8af5f5","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a11d947-f877-4305-b008-7988fa8af5f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59958","PortSpecifier":{"PortValue":59958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59958","PortSpecifier":{"PortValue":59958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378533,"nanos":817510944},"http":{"id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6c8fa6-454d-4e1a-b720-b6b6789576f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35352","PortSpecifier":{"PortValue":35352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2ae139e-56fb-407e-b131-fffffdce7c32","method":"GET","path":"/maas-api/v1/api-keys/11d25f93-180f-48d8-bc21-fc27ff11eedf","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35352","PortSpecifier":{"PortValue":35352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378533,"nanos":892035072},"http":{"id":"b2ae139e-56fb-407e-b131-fffffdce7c32","method":"GET","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11d25f93-180f-48d8-bc21-fc27ff11eedf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11d25f93-180f-48d8-bc21-fc27ff11eedf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ae139e-56fb-407e-b131-fffffdce7c32","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4126299f-15b1-9c6c-9be1-f41727c5358a","method":"GET","path":"/maas-api/v1/api-keys/b814bcda-e4d1-4fa7-aa66-6ab2b3f7e738","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378533,"nanos":940913890},"http":{"id":"4126299f-15b1-9c6c-9be1-f41727c5358a","method":"GET","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b814bcda-e4d1-4fa7-aa66-6ab2b3f7e738",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b814bcda-e4d1-4fa7-aa66-6ab2b3f7e738",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4126299f-15b1-9c6c-9be1-f41727c5358a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41524","PortSpecifier":{"PortValue":41524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41524","PortSpecifier":{"PortValue":41524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378558,"nanos":288488032},"http":{"id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9eefb0-83c9-4903-a6ec-a6bc84621018","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53008","PortSpecifier":{"PortValue":53008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54eff0a2-2909-4b88-aea4-b356c3c50694","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53008","PortSpecifier":{"PortValue":53008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378558,"nanos":335487368},"http":{"id":"54eff0a2-2909-4b88-aea4-b356c3c50694","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54eff0a2-2909-4b88-aea4-b356c3c50694","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"614c82c6-13d7-486b-a4ca-69e818d70a96","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378558,"nanos":377757545},"http":{"id":"614c82c6-13d7-486b-a4ca-69e818d70a96","method":"GET","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QMjHHnN9wS0glHkc_UA1OpXBTM5ghFiJdyLPCqLobkKJgnNy1pv2Zx9cMHzz"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QMjHHnN9wS0glHkc_UA1OpXBTM5ghFiJdyLPCqLobkKJgnNy1pv2Zx9cMHzz\"}"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97ec2691-96c1-451a-9650-449801eb5e97","keyName":"e2e-auth-iso-a-87c6cd","subscription":"e2e-auth-iso-681f2e","tenant":"e2e-shared-a-2ef6a3","userId":"97ec2691-96c1-451a-9650-449801eb5e97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-681f2e"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:55:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"614c82c6-13d7-486b-a4ca-69e818d70a96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46814","PortSpecifier":{"PortValue":46814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46814","PortSpecifier":{"PortValue":46814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378575,"nanos":516329648},"http":{"id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ab98c4-68df-4527-acaa-d33781e0a4b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378575,"nanos":550170037},"http":{"id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23bb32a-eea3-4215-953d-2ac8d44f7c8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85995ef4-028d-40b1-a11c-58550bd46510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59370","PortSpecifier":{"PortValue":59370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85995ef4-028d-40b1-a11c-58550bd46510","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85995ef4-028d-40b1-a11c-58550bd46510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59370","PortSpecifier":{"PortValue":59370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378575,"nanos":583290307},"http":{"id":"85995ef4-028d-40b1-a11c-58550bd46510","method":"GET","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85995ef4-028d-40b1-a11c-58550bd46510","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1862Z9zTV7eJHNL7X_uNR4TBRwJj9w2re45g3vH1W8mIXwIjcdPthsnX5ZcWk"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85995ef4-028d-40b1-a11c-58550bd46510","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1862Z9zTV7eJHNL7X_uNR4TBRwJj9w2re45g3vH1W8mIXwIjcdPthsnX5ZcWk\"}"} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85995ef4-028d-40b1-a11c-58550bd46510","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85995ef4-028d-40b1-a11c-58550bd46510","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85995ef4-028d-40b1-a11c-58550bd46510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"85995ef4-028d-40b1-a11c-58550bd46510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85995ef4-028d-40b1-a11c-58550bd46510","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T22:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85995ef4-028d-40b1-a11c-58550bd46510","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51494","PortSpecifier":{"PortValue":51494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b84ed10-dbed-44c9-91e3-d61272562286","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51494","PortSpecifier":{"PortValue":51494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378594,"nanos":826030799},"http":{"id":"9b84ed10-dbed-44c9-91e3-d61272562286","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b84ed10-dbed-44c9-91e3-d61272562286","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56726","PortSpecifier":{"PortValue":56726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56726","PortSpecifier":{"PortValue":56726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378594,"nanos":864735608},"http":{"id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31ca93b4-d8d0-4438-82d3-bc48aa5a848e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51498","PortSpecifier":{"PortValue":51498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51498","PortSpecifier":{"PortValue":51498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378594,"nanos":906971612},"http":{"id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8021d27-f4d3-4f69-bcda-909f95a7057b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56742","PortSpecifier":{"PortValue":56742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13e698a0-856a-40d4-a38e-879b4a5854bd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56742","PortSpecifier":{"PortValue":56742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378594,"nanos":946218057},"http":{"id":"13e698a0-856a-40d4-a38e-879b4a5854bd","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e698a0-856a-40d4-a38e-879b4a5854bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53276","PortSpecifier":{"PortValue":53276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53276","PortSpecifier":{"PortValue":53276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378612,"nanos":139479834},"http":{"id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc6c85b-205f-438a-804b-f8c85f4e076b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b879e7-313a-4556-a683-20d06e036186","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58220","PortSpecifier":{"PortValue":58220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91b879e7-313a-4556-a683-20d06e036186","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b879e7-313a-4556-a683-20d06e036186","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58220","PortSpecifier":{"PortValue":58220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378612,"nanos":178652283},"http":{"id":"91b879e7-313a-4556-a683-20d06e036186","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91b879e7-313a-4556-a683-20d06e036186","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91b879e7-313a-4556-a683-20d06e036186","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b879e7-313a-4556-a683-20d06e036186","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b879e7-313a-4556-a683-20d06e036186","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b879e7-313a-4556-a683-20d06e036186","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58234","PortSpecifier":{"PortValue":58234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4205eb7-aeac-497d-bc11-570eb046e622","method":"GET","path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58234","PortSpecifier":{"PortValue":58234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378612,"nanos":218533993},"http":{"id":"e4205eb7-aeac-497d-bc11-570eb046e622","method":"GET","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4205eb7-aeac-497d-bc11-570eb046e622","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53284","PortSpecifier":{"PortValue":53284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89532b29-01c0-441e-90fb-ca24abda6c81","method":"GET","path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53284","PortSpecifier":{"PortValue":53284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378612,"nanos":255866185},"http":{"id":"89532b29-01c0-441e-90fb-ca24abda6c81","method":"GET","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8aba1de7-f6aa-4476-9cb1-9136e443a59f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89532b29-01c0-441e-90fb-ca24abda6c81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529e059b-41c6-4169-8593-1739a4c3545e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38430","PortSpecifier":{"PortValue":38430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"529e059b-41c6-4169-8593-1739a4c3545e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529e059b-41c6-4169-8593-1739a4c3545e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38430","PortSpecifier":{"PortValue":38430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378634,"nanos":506179584},"http":{"id":"529e059b-41c6-4169-8593-1739a4c3545e","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"529e059b-41c6-4169-8593-1739a4c3545e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"529e059b-41c6-4169-8593-1739a4c3545e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529e059b-41c6-4169-8593-1739a4c3545e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529e059b-41c6-4169-8593-1739a4c3545e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529e059b-41c6-4169-8593-1739a4c3545e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36654","PortSpecifier":{"PortValue":36654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36654","PortSpecifier":{"PortValue":36654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378634,"nanos":544211754},"http":{"id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/auth-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d97f-5ba5-4a32-9098-1a10841f9e7f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378634,"nanos":582217162},"http":{"id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWAauwsos1ceolJE_URFjYNgSQQIyMb7GnRcHgpPB6O8oKuIQw2AAJHRUe6m"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWAauwsos1ceolJE_URFjYNgSQQIyMb7GnRcHgpPB6O8oKuIQw2AAJHRUe6m\"}"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"26be8d61-603f-4f9c-af49-ac257c9b443c","keyName":"e2e-auth-iso-a-2cbe40","subscription":"e2e-auth-iso-71a13b","tenant":"e2e-shared-a-2ef6a3","userId":"26be8d61-603f-4f9c-af49-ac257c9b443c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/auth-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-71a13b"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0dc5093-0eaf-4105-bc55-3bc03db19b70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e391dede315b297ec1ba5f6878e597ec9f33205f5ce49797089431b05469cde"} {"level":"info","ts":"2026-07-06T22:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccb3b36e48a7e2f3717993b1bf98da7c1c71e4c478344fd380b27d596535f5b4"} {"level":"info","ts":"2026-07-06T22:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab80a3ab663241184b57fa0246c2e49d9a820ef83ea6d77c707a74d9029e75e4"} {"level":"info","ts":"2026-07-06T22:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4212321d75c3f7f5d30dee1eec9f876575b64d46ad6ab3bd6c81f6b89022a94a"} {"level":"info","ts":"2026-07-06T22:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/999ef8412fa4073be2c0ba417f6842f813d38fe7f861a3516f0aaceb5e80a062"} {"level":"info","ts":"2026-07-06T22:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69faa712cbe9a487d8d704d2073c273824b2d025b1a0413102a86c3552f73d9"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2ccacb74f205ea01badb827a7a6b3f1613089da6c814e53daba44e3e7d8d20c"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55928e0b22e60b01354456e107a38a961698de2a097c7d88e0923c78013ca3f0"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/403d10b658f424cf5b64fa04c39cd437a87d7a6d5badd714d278c8b466af7866"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09bbdc199081c252e8f9bb0e02bef94d02b6c4dba586b5ef7a27b3288d43736a"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3e1667a06d2ad3ef1d1a63c3eede5f9269ad878304fc64777dae5f15ea93d3"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bce39cccfb44c985f3a1e373653419306860e453f2ce2e22476791f9ed9626cd"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b399d05d6e9be0b492dfd643fd2285d8dfc3e0d90b1bee52a1064d1cf3d68e2"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab47cfc36872b8a88aaeba09af6ea36f4e4f1805ddebde55b913ea1a251841ce"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b39544edb4eb1d791f4582e1c523adbd7a1ec19c477375e0f01df0e38a43d0f"} {"level":"info","ts":"2026-07-06T22:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d93c997d16e29ca78da4f59fa707e769cc7a0ee868cdf7d22baf7d6044221c92"} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"error","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"info","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"error","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"} {"level":"error","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"error","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"error","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"info","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"} {"level":"info","ts":"2026-07-06T22:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37216","PortSpecifier":{"PortValue":37216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37216","PortSpecifier":{"PortValue":37216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378710,"nanos":544320835},"http":{"id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/sub-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2f03ef-feb8-41df-b5e1-17ed3f2e94c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54370","PortSpecifier":{"PortValue":54370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54370","PortSpecifier":{"PortValue":54370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378710,"nanos":591712202},"http":{"id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/sub-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f86cd6cb-250c-4e7d-bb86-5ae0085ba7f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37228","PortSpecifier":{"PortValue":37228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05c7da95-121a-4b07-8cb8-3001c6110567","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37228","PortSpecifier":{"PortValue":37228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378710,"nanos":631179255},"http":{"id":"05c7da95-121a-4b07-8cb8-3001c6110567","method":"GET","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cQ64heVdqpnVKkP8_kRIvSYmmBa1Pmxv31ufvOSQGd7kTTlFBTfqiurVT0jD"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cQ64heVdqpnVKkP8_kRIvSYmmBa1Pmxv31ufvOSQGd7kTTlFBTfqiurVT0jD\"}"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45074f94-e859-4234-b4e2-36257295bced","keyName":"e2e-sub-iso-3a2a08","subscription":"e2e-a-only-2f720a","tenant":"e2e-shared-a-2ef6a3","userId":"45074f94-e859-4234-b4e2-36257295bced","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/sub-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-2f720a"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05c7da95-121a-4b07-8cb8-3001c6110567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54372","PortSpecifier":{"PortValue":54372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54372","PortSpecifier":{"PortValue":54372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378710,"nanos":675307049},"http":{"id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","method":"GET","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LJBwq8sqmEMZ0Te9_BYfM6Cquf7fCsQqpzaVwmkUtgqYRKHycR5iDD0mR4Oj"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LJBwq8sqmEMZ0Te9_BYfM6Cquf7fCsQqpzaVwmkUtgqYRKHycR5iDD0mR4Oj\"}"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd495854-079c-4f20-bfc6-6fe71a623e9d","keyName":"e2e-sub-iso-03284e","subscription":"e2e-b-only-2f720a","tenant":"e2e-shared-b-6c153e","userId":"cd495854-079c-4f20-bfc6-6fe71a623e9d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/sub-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-2f720a"} {"level":"info","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faa7430e-a1f3-4f9e-816c-daf5e51db5f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378729,"nanos":112098705},"http":{"id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/sub-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a216132f-8cd7-4a14-a4f6-a2fcbe3fef7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378729,"nanos":154296122},"http":{"id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/sub-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3c22862-8d9e-40ca-b6c6-cf4c03536231","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41208","PortSpecifier":{"PortValue":41208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41208","PortSpecifier":{"PortValue":41208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378729,"nanos":188621341},"http":{"id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EubIEkPl1aoAAvd6_CRWVl7K1BYN6b9Ir8MxG6v3PYlYCmml5XuQLkiiiPg6"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EubIEkPl1aoAAvd6_CRWVl7K1BYN6b9Ir8MxG6v3PYlYCmml5XuQLkiiiPg6\"}"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bfb617af-eab9-4a82-ae39-c81613bb4f1a","keyName":"e2e-sub-iso-6f9fc8","subscription":"e2e-shared-sub-b36c4e","tenant":"e2e-shared-a-2ef6a3","userId":"bfb617af-eab9-4a82-ae39-c81613bb4f1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/sub-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b36c4e"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf702bd-3800-4b19-a560-2ebf56acba8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5797122-756c-4c03-9d13-50614d282c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49540","PortSpecifier":{"PortValue":49540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5797122-756c-4c03-9d13-50614d282c2e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5797122-756c-4c03-9d13-50614d282c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49540","PortSpecifier":{"PortValue":49540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378729,"nanos":218454971},"http":{"id":"c5797122-756c-4c03-9d13-50614d282c2e","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Lp13Of2NYctRpBrh_bUpoZYzi1BmynU1iowGETNJBrKsFM5ReDhVkIAJn2Us"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Lp13Of2NYctRpBrh_bUpoZYzi1BmynU1iowGETNJBrKsFM5ReDhVkIAJn2Us\"}"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebb38f8a-3431-4af5-b825-77f52d657b9a","keyName":"e2e-sub-iso-bb17d9","subscription":"e2e-shared-sub-b36c4e","tenant":"e2e-shared-b-6c153e","userId":"ebb38f8a-3431-4af5-b825-77f52d657b9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5797122-756c-4c03-9d13-50614d282c2e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/sub-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5797122-756c-4c03-9d13-50614d282c2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b36c4e"} {"level":"info","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5797122-756c-4c03-9d13-50614d282c2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5797122-756c-4c03-9d13-50614d282c2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a75f1c20548bde4a085d178cbf66615366a85470cd72a09bbe3281e10926aee8"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d54d3fb63d9857a6a02dae40604eeedad0eb10ac808c71c6558f25d80d99732"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64275105576401b866329c0b02ac06bb2ce9d1a1475bb081012001951cd5786f"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5fead4af4b9b59996db3913f000a911ff5e55fd5b07d34e2f2c2a10e8236ddf"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce1bb8d5935430b41b56906323211aacc8f193d2fc0cde4baf117a566f44a022"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36f453eda13f856610d256de38464d0fedef7c2b271577c1752be6cddc5fc57c"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae8b3960481aa3f72e4e7d809466be77d447298e96b7bbacfc43892f829b1c81"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7a6c87f026740d8736c1e2e2571f0bc6821ee931db2bba0775a3f797fd53f76"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c5db7df59e0887dd0ae968a82d4c24bc2079882e8740af5985613fcd2a1d2d9"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9d80ac9d53a40426ad7baa316862908734675e676248d42b43419d05c8bf0e2"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e10d9c61e5b1c8102a8934ffa8db1b31ea404e5910c8ef0e8b00d854e7834dd3"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61193d2f4c37155237b70335de17d600d6c1db8bf17bc4bfe6bf2481d8be8096"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd01ab7b4e48b9d77a43bfb20af4bfe05f7e95d857597e01583b91b69edfaa8b"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f4278e317b35ee144983ef92c6e12338bbbb07688c4f96cb30bdf11fe42328f"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5cb1b40a6771383d4f3a191de9f648a55afceab4372c217383b3e8125363e52"} {"level":"info","ts":"2026-07-06T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12339629c2f89bdd114277e57d244b2888573e48ebb95b12a3fa0538903cabde"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"error","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"error","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"debug","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"info","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"} {"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"error","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"} {"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28554b3-c5d2-452f-a702-2822f4291660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41390","PortSpecifier":{"PortValue":41390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28554b3-c5d2-452f-a702-2822f4291660","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28554b3-c5d2-452f-a702-2822f4291660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41390","PortSpecifier":{"PortValue":41390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":653893634},"http":{"id":"f28554b3-c5d2-452f-a702-2822f4291660","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f28554b3-c5d2-452f-a702-2822f4291660","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28554b3-c5d2-452f-a702-2822f4291660","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":699271749},"http":{"id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41406","PortSpecifier":{"PortValue":41406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41406","PortSpecifier":{"PortValue":41406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":743781441},"http":{"id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378790,"nanos":806937230},"http":{"id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378791,"nanos":843088712},"http":{"id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51424","PortSpecifier":{"PortValue":51424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c701d7d2-e086-4ee1-895e-543ee792c81d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51424","PortSpecifier":{"PortValue":51424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":752210009},"http":{"id":"c701d7d2-e086-4ee1-895e-543ee792c81d","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3483e74d-d790-4056-997e-a2f7811e6d68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":795137416},"http":{"id":"3483e74d-d790-4056-997e-a2f7811e6d68","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a8d309a-592c-4f1c-9a49-c2158577c714","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":836592602},"http":{"id":"9a8d309a-592c-4f1c-9a49-c2158577c714","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca0311d-2b03-4305-86cf-cac33d01d656","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378805,"nanos":877943586},"http":{"id":"8ca0311d-2b03-4305-86cf-cac33d01d656","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378806,"nanos":926549151},"http":{"id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49b6ce21-e321-47e3-b342-a925dd0e1481","method":"POST","path":"/ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e/v1/completions","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378806,"nanos":969218491},"http":{"id":"49b6ce21-e321-47e3-b342-a925dd0e1481","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7WVhCk8QEXsA1u5X_6u16lU9rj729chvvq2yZyt8fapjZDThEdK7PJOzGaFp"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7WVhCk8QEXsA1u5X_6u16lU9rj729chvvq2yZyt8fapjZDThEdK7PJOzGaFp\"}"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","keyName":"e2e-rate-b-4a3f04","subscription":"e2e-rate-iso-b-4a3f04","tenant":"e2e-shared-b-6c153e","userId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\",\"requestedSubscription\":\"e2e-rate-iso-b-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6c153e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4a3f04","namespace":"ai-tenant-e2e-shared-b-6c153e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4a3f04"} {"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","keyName":"e2e-rate-b-4a3f04","selected_subscription":"e2e-rate-iso-b-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-b-6c153e/e2e-rate-iso-b-4a3f04@ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6c153e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4a3f04","namespace":"ai-tenant-e2e-shared-b-6c153e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T23:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"} {"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"} {"level":"info","ts":"2026-07-06T23:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"} {"level":"info","ts":"2026-07-06T23:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"}