--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42770","PortSpecifier":{"PortValue":42770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ee993f1-000f-4c20-ab41-c952b60ef916","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42770","PortSpecifier":{"PortValue":42770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437064,"nanos":389302899},"http":{"id":"5ee993f1-000f-4c20-ab41-c952b60ef916","method":"POST","headers":{":authority":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5efca91656809e6051699a0a459719412dbc6021c4c93de76c8f753851e5c82a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-45adb8/test-model-45adb8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee993f1-000f-4c20-ab41-c952b60ef916","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38508","PortSpecifier":{"PortValue":38508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","method":"POST","path":"/ai-tenant-e2e-inf-a-45adb8/test-model-45adb8/v1/chat/completions","host":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38508","PortSpecifier":{"PortValue":38508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437068,"nanos":453334420},"http":{"id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","method":"POST","headers":{":authority":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-45adb8/test-model-45adb8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Trj5VWM5DpdeFeRf_vh5HlqfbcPNOnArZi5VcUHauNe9IosHun2I9qznBmBI"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-45adb8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Trj5VWM5DpdeFeRf_vh5HlqfbcPNOnArZi5VcUHauNe9IosHun2I9qznBmBI\"}"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-45adb8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"606a92de-f14f-44b0-b896-63ca78a41bd5","keyName":"e2e-tenant-inference-45adb8","subscription":"test-model-45adb8-sub","tenant":"e2e-inf-a-45adb8","userId":"606a92de-f14f-44b0-b896-63ca78a41bd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-45adb8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-45adb8/test-model-45adb8\",\"requestedSubscription\":\"test-model-45adb8-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-45adb8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-45adb8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-45adb8-sub","namespace":"ai-tenant-e2e-inf-a-45adb8","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-45adb8/test-model-45adb8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-45adb8-sub"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"606a92de-f14f-44b0-b896-63ca78a41bd5","keyName":"e2e-tenant-inference-45adb8","selected_subscription":"test-model-45adb8-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-45adb8/test-model-45adb8-sub@ai-tenant-e2e-inf-a-45adb8/test-model-45adb8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-45adb8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-45adb8-sub","namespace":"ai-tenant-e2e-inf-a-45adb8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12e6bec-8103-4dfa-b5a0-aca2c7e76efa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38512","PortSpecifier":{"PortValue":38512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38512","PortSpecifier":{"PortValue":38512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437068,"nanos":745129921},"http":{"id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","method":"POST","headers":{":authority":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5efca91656809e6051699a0a459719412dbc6021c4c93de76c8f753851e5c82a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-45adb8.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-45adb8/test-model-45adb8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9e5d6f1-24f0-4d99-bd1c-de4d83bb9758","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f235c247-a949-4182-89b2-825c7d0b5f1b","method":"POST","path":"/ai-tenant-e2e-inf-b-c95db0/test-model-c95db0/v1/chat/completions","host":"e2e-inf-b-c95db0.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437068,"nanos":788382337},"http":{"id":"f235c247-a949-4182-89b2-825c7d0b5f1b","method":"POST","headers":{":authority":"e2e-inf-b-c95db0.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c95db0/test-model-c95db0/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MSg8vxQtpPM8TlMZ_K40hTtzwwMRekqDE0fUnDpsxMG0829rshIlHEqBHzfr"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-c95db0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MSg8vxQtpPM8TlMZ_K40hTtzwwMRekqDE0fUnDpsxMG0829rshIlHEqBHzfr\"}"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c95db0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c95db0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-c95db0.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c95db0/test-model-c95db0/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T15:11:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f235c247-a949-4182-89b2-825c7d0b5f1b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T15:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7106b60a4cff1591064a694afd2d3a39304047c59573c23195c1cd3ebe3c6e5f"} {"level":"info","ts":"2026-07-07T15:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3642ccce78b09a824043966703750d3b102b92aebede51a02fce5ce831412ab1"} {"level":"info","ts":"2026-07-07T15:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9687c1b7e28d2e5603d1164792c686253c27f494a5cc0be5955e4129b4b2089"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43767d6a4de0a60e79ba6c5dd4fff9e474d03ebc0d07e859b6589f2b00cc7b32"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eebdcf095296280ac7d2a3ea8aa17115b21a9c78756f86684e45fe04a633c69e"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/308363fcc0dd48bf2a277ba8fb310f001914975f0fe9d49cb9535d976e0de949"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68ae5bb83cb536e7060092c732289395a8549bd5d21d21e25b8c0ce0e60a896a"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f6344f33dbf87dd7cf2e294a626db4ce533cd1a1910126a0defcc0886e5044b"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b68e477f22309facb3fc4b34721b5f097507927dc429970c203e04f2036c4d1f"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5efca91656809e6051699a0a459719412dbc6021c4c93de76c8f753851e5c82a"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aab694c80a8dad97256e09b6de962f1cbc81d3d78682979f951fec238a7d8aa"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f14851a88ed1d62a07be2c6bf521e296474bafd7f30612fccca6c03b638e8bfe"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12781d3ea9d4e0bca594b92c93d0d20e2264df8815ec87cdf007003e2a607636"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da44bff673e86350b0d971c7ce441fabda78ca7998fb398400733e5c9251ba2e"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1671f1358e01af8beb05321d63c829453317896f5ec162f4a0ba991753d8a338"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e9158bbcfc5c9f74e775a11a4dbf2dc4d996318dd9a50c8222e8dfd732f4e98"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ded15e7a85ac12978d64ec137692c24f85e98e104e4b02f1701a18476ad16e54"} {"level":"info","ts":"2026-07-07T15:11:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6b3d2ff9b9655e19030aef8e633f93410166c8213b11d4f56af1168a206e52d"} {"level":"info","ts":"2026-07-07T15:11:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d9df0c1a1ebeaf284efc6a848d56a4b6e0d6cd4b3f90c558a3dafcf2224cbd8"} {"level":"info","ts":"2026-07-07T15:11:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/700d90060dc5533b7068c1a7d26d6931d474a8e63a26ac63fc3c340318da5235"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"error","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"} {"level":"error","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"} {"level":"info","ts":"2026-07-07T15:12:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b79c2206d9c6ad3e8c3528826f6921980e550228d878bc36179e42f30da3eb8"} {"level":"info","ts":"2026-07-07T15:12:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307760e5c650d4410222f9d615ddd937383863c86363ff5a84af4911d07f542c"} {"level":"info","ts":"2026-07-07T15:12:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df6a53d6f1e4b7f2a07ef9a303942453f398dcd3c6e478478a954a4da765c62"} {"level":"info","ts":"2026-07-07T15:12:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb43bd97b67de451bf295d13de91b204cd514897fd98d07132ec550744d4e8cc"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4"} {"level":"info","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"error","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"} {"level":"error","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9"} {"level":"debug","ts":"2026-07-07T15:14:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9"} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647"} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57058","PortSpecifier":{"PortValue":57058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57058","PortSpecifier":{"PortValue":57058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437256,"nanos":345229123},"http":{"id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2dac7e-2c6d-47bb-a6de-57e00a8e22f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42774","PortSpecifier":{"PortValue":42774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42774","PortSpecifier":{"PortValue":42774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437256,"nanos":406457409},"http":{"id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a7a1a5-38c8-40a8-8d0b-a0db4dd8b24f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57066","PortSpecifier":{"PortValue":57066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","method":"GET","path":"/maas-api/v1/api-keys/ca638d89-75b4-4053-ada3-b7bd3380f21f","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57066","PortSpecifier":{"PortValue":57066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437256,"nanos":492689352},"http":{"id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","method":"GET","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca638d89-75b4-4053-ada3-b7bd3380f21f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca638d89-75b4-4053-ada3-b7bd3380f21f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7e7f1b1-a322-40bd-8e10-36651ba02747","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42780","PortSpecifier":{"PortValue":42780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","method":"GET","path":"/maas-api/v1/api-keys/2699df00-b643-4dc5-a9bd-f4305ce6f08a","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42780","PortSpecifier":{"PortValue":42780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437256,"nanos":530961750},"http":{"id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","method":"GET","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2699df00-b643-4dc5-a9bd-f4305ce6f08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2699df00-b643-4dc5-a9bd-f4305ce6f08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d75c1a64-f4ba-40c7-ad88-12120bad85f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59616","PortSpecifier":{"PortValue":59616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59616","PortSpecifier":{"PortValue":59616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437273,"nanos":675249184},"http":{"id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303ddbe6-246d-4bd6-8cdc-3f09726ffe89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53644","PortSpecifier":{"PortValue":53644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53644","PortSpecifier":{"PortValue":53644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437273,"nanos":713149482},"http":{"id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c774310-6ee5-46e0-85b8-d6160939e6c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437273,"nanos":763622599},"http":{"id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","method":"GET","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mBipFl79gg5xfOoB_Vu49a5j9XYOH4J1qYdeD30b8mIGS2BFoeTc4PdgtWYH"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mBipFl79gg5xfOoB_Vu49a5j9XYOH4J1qYdeD30b8mIGS2BFoeTc4PdgtWYH\"}"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18ec69e5-51b2-4303-b095-7cff055581f1","keyName":"e2e-auth-iso-a-46884a","subscription":"e2e-auth-iso-f8b0bd","tenant":"e2e-shared-a-96d90d","userId":"18ec69e5-51b2-4303-b095-7cff055581f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f8b0bd"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e81105f-0093-481e-9745-fe2bd87f8e7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42616","PortSpecifier":{"PortValue":42616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efcab6a9-e7db-4b50-9043-556062c4fe25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42616","PortSpecifier":{"PortValue":42616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437293,"nanos":89076697},"http":{"id":"efcab6a9-e7db-4b50-9043-556062c4fe25","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcab6a9-e7db-4b50-9043-556062c4fe25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40042","PortSpecifier":{"PortValue":40042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40042","PortSpecifier":{"PortValue":40042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437293,"nanos":125694316},"http":{"id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ac5e504-cbc5-4f79-8423-2f5c49ff870e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40052","PortSpecifier":{"PortValue":40052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40052","PortSpecifier":{"PortValue":40052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437293,"nanos":166555044},"http":{"id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","method":"GET","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RdZGDKkmMRbSdJdG_7uw3fgFJDD1ZNo3AnvaPwpa20wHE6adkP6JmUdlRfGc"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RdZGDKkmMRbSdJdG_7uw3fgFJDD1ZNo3AnvaPwpa20wHE6adkP6JmUdlRfGc\"}"} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T15:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b34be553-6d2a-4f06-9fe0-53e9e2679e84","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51456","PortSpecifier":{"PortValue":51456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51456","PortSpecifier":{"PortValue":51456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437310,"nanos":280833667},"http":{"id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cee5c574-dd7f-4b7d-90f8-dbb912817618","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51958","PortSpecifier":{"PortValue":51958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51958","PortSpecifier":{"PortValue":51958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437310,"nanos":315456358},"http":{"id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e55d7ac3-52c8-4e00-abe0-0c0f5e8cb96d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51470","PortSpecifier":{"PortValue":51470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51470","PortSpecifier":{"PortValue":51470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437310,"nanos":351645106},"http":{"id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd88f09-2eab-4f20-a31d-e04af7e944c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"046275f9-779a-470e-817a-974a6934ae4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51974","PortSpecifier":{"PortValue":51974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"046275f9-779a-470e-817a-974a6934ae4f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"046275f9-779a-470e-817a-974a6934ae4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51974","PortSpecifier":{"PortValue":51974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437310,"nanos":388617220},"http":{"id":"046275f9-779a-470e-817a-974a6934ae4f","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"046275f9-779a-470e-817a-974a6934ae4f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"046275f9-779a-470e-817a-974a6934ae4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"046275f9-779a-470e-817a-974a6934ae4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"046275f9-779a-470e-817a-974a6934ae4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"046275f9-779a-470e-817a-974a6934ae4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45824","PortSpecifier":{"PortValue":45824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b296b8a9-c70f-46be-ae26-6b632afe6804","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45824","PortSpecifier":{"PortValue":45824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437325,"nanos":478973848},"http":{"id":"b296b8a9-c70f-46be-ae26-6b632afe6804","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b296b8a9-c70f-46be-ae26-6b632afe6804","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38438","PortSpecifier":{"PortValue":38438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38438","PortSpecifier":{"PortValue":38438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437325,"nanos":518173702},"http":{"id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf8c14d-78b7-4c4d-bf41-b2f09ee325e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","method":"GET","path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437325,"nanos":556702369},"http":{"id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","method":"GET","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bea6c2a-1bc9-4536-9ca1-244dbb2e6f81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45838","PortSpecifier":{"PortValue":45838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","method":"GET","path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45838","PortSpecifier":{"PortValue":45838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437325,"nanos":591139484},"http":{"id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","method":"GET","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a132d115-bcde-4547-92bb-6806886ae9d5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aa29871-9f43-4ea3-9f67-f2b6a528b95e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58222","PortSpecifier":{"PortValue":58222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55b155dc-08c6-4b85-acd5-0d46de79397e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58222","PortSpecifier":{"PortValue":58222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437340,"nanos":564818680},"http":{"id":"55b155dc-08c6-4b85-acd5-0d46de79397e","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b155dc-08c6-4b85-acd5-0d46de79397e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44886","PortSpecifier":{"PortValue":44886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fde8f44-0e56-4637-b155-61d802c480d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44886","PortSpecifier":{"PortValue":44886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437340,"nanos":600180587},"http":{"id":"1fde8f44-0e56-4637-b155-61d802c480d5","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/auth-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fde8f44-0e56-4637-b155-61d802c480d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58230","PortSpecifier":{"PortValue":58230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58230","PortSpecifier":{"PortValue":58230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437340,"nanos":639109986},"http":{"id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ND5zJazApj4040Ik_Safwvkxt86sHw7LcFM0eTV9tdN84aOYUpVlvcfMVZLc"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ND5zJazApj4040Ik_Safwvkxt86sHw7LcFM0eTV9tdN84aOYUpVlvcfMVZLc\"}"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91fdec92-2d87-44de-8a73-cf6210487b8d","keyName":"e2e-auth-iso-a-c61fcd","subscription":"e2e-auth-iso-cf805e","tenant":"e2e-shared-a-96d90d","userId":"91fdec92-2d87-44de-8a73-cf6210487b8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/auth-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cf805e"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:15:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e55dc456-40e8-4d0f-adf5-4ac6fa49ad69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92b1c02207b538dff0a60c0fcd80e7f763fd576e74f604c2b453712d75e3ef6d"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3252397f97f51d2373b51524cbba7c815b3c04b87b425a29ae38bc781e5c2c8b"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e98dc5005174023b4e98dcce33c413de7a19e56d4522fed95ce26fc78c1ccfbf"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1c23909a362f22ddc1643a31e20f12884e6657d9fb9af147fea2ed259ecd99a"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcb72bb47672c4566ec099b6c355ad3c9686904754145ccde4b3eaf9f255ef8e"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdb60672e19aafec1e66bb733a7115175c2ac28fc5176c98cf5bc85c5906f5e7"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36625cd05845cce0bb3167ab04d2dcdaec51242129e36887d02ef982fd750c0e"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7382546b11d714e14a45a0530e58de241590cb39d078f249b0cdf42706e076a6"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6737a1e652644c1f80e33b65983c85cde2205dd0708199c3bbdea13e0b311d8d"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23ed69b105f961092041a1ae7a6aae9ad852e90750c9069f1fca4e761206a9f6"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/390479a3d7ad46dfd453f4f8b7b7e343cc5c14dfc2de18ce2290a3e4899b9647"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d9d8657db4790ae68b265dae50a2d939c70af9daba99b5d1990ec5bb5b477d9"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a5a4a2491a03462cd77d401a352b49829700fba40468f4c2a68a9e01e3998d4"} {"level":"info","ts":"2026-07-07T15:15:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5354147042c24beb136f8e24d59ec4082754c4be1aa1e6d9115f1af563e27f1c"} {"level":"info","ts":"2026-07-07T15:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7bbe949d0c89666949f0b515144d99cae98e4aff22d3238ba0723f1bd581b55"} {"level":"info","ts":"2026-07-07T15:15:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dd2f5f71a8f01c781480c91025322dc1044e6974c410ad9af0e111083b3478f"} {"level":"debug","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"error","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"} {"level":"info","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"info","ts":"2026-07-07T15:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc"} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"error","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"error","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"error","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc"} {"level":"debug","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"info","ts":"2026-07-07T15:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60036","PortSpecifier":{"PortValue":60036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60036","PortSpecifier":{"PortValue":60036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437396,"nanos":317297074},"http":{"id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/sub-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1531be-a0fe-48e2-b3cc-93f434c9f19b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38148","PortSpecifier":{"PortValue":38148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38148","PortSpecifier":{"PortValue":38148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437396,"nanos":359003121},"http":{"id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/sub-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66aa04c9-74cf-40aa-aaee-1640d52eb8bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60048","PortSpecifier":{"PortValue":60048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8de5144-9888-4000-b8f6-e4fb9760d596","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60048","PortSpecifier":{"PortValue":60048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437396,"nanos":397252862},"http":{"id":"c8de5144-9888-4000-b8f6-e4fb9760d596","method":"GET","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d69P180SJK0MP2B1_GbutYtYk51787Y7iMpVGpcFFeq7FI9Wc04n0Ycu3lio"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d69P180SJK0MP2B1_GbutYtYk51787Y7iMpVGpcFFeq7FI9Wc04n0Ycu3lio\"}"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44260f8c-e68d-4b16-815e-f2a9becd064f","keyName":"e2e-sub-iso-7fd85f","subscription":"e2e-a-only-438d33","tenant":"e2e-shared-a-96d90d","userId":"44260f8c-e68d-4b16-815e-f2a9becd064f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/sub-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-438d33"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8de5144-9888-4000-b8f6-e4fb9760d596","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38160","PortSpecifier":{"PortValue":38160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9abfea0-104b-4614-b433-455ac442e0e6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38160","PortSpecifier":{"PortValue":38160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437396,"nanos":426497715},"http":{"id":"b9abfea0-104b-4614-b433-455ac442e0e6","method":"GET","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KSpdj9Vr2KDRN1bD_yFNWHYUAicwMjrAaFYQXBc0YKspjjE2DEtAjtRU9nKN"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KSpdj9Vr2KDRN1bD_yFNWHYUAicwMjrAaFYQXBc0YKspjjE2DEtAjtRU9nKN\"}"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d174af0e-64e4-4520-8976-f45948a437e6","keyName":"e2e-sub-iso-debda0","subscription":"e2e-b-only-438d33","tenant":"e2e-shared-b-17f250","userId":"d174af0e-64e4-4520-8976-f45948a437e6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/sub-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-438d33"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9abfea0-104b-4614-b433-455ac442e0e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49116","PortSpecifier":{"PortValue":49116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bfbe367-60ef-48af-8a04-ce04aae21543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49116","PortSpecifier":{"PortValue":49116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437404,"nanos":277441770},"http":{"id":"4bfbe367-60ef-48af-8a04-ce04aae21543","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/sub-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bfbe367-60ef-48af-8a04-ce04aae21543","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40680","PortSpecifier":{"PortValue":40680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40680","PortSpecifier":{"PortValue":40680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437404,"nanos":318452134},"http":{"id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/sub-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82afb17-e213-4a62-9b98-c97ee5cf72f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49130","PortSpecifier":{"PortValue":49130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49130","PortSpecifier":{"PortValue":49130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437404,"nanos":352525761},"http":{"id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EXTP0jiJJVorwhzy_TH92Tcnf2sRfyY9x1HJhmvQ7s8858ceOMtrR2EBSNlx"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EXTP0jiJJVorwhzy_TH92Tcnf2sRfyY9x1HJhmvQ7s8858ceOMtrR2EBSNlx\"}"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44c7d083-ec51-4303-bcdc-b8eccd7ecf6c","keyName":"e2e-sub-iso-9c5a56","subscription":"e2e-shared-sub-1000bf","tenant":"e2e-shared-a-96d90d","userId":"44c7d083-ec51-4303-bcdc-b8eccd7ecf6c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/sub-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1000bf"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b80edb5-bcb2-4e77-8d54-499016d7c75e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"699943c1-096e-4fba-a431-46803fbe8450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40692","PortSpecifier":{"PortValue":40692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"699943c1-096e-4fba-a431-46803fbe8450","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"699943c1-096e-4fba-a431-46803fbe8450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40692","PortSpecifier":{"PortValue":40692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437404,"nanos":382448173},"http":{"id":"699943c1-096e-4fba-a431-46803fbe8450","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-i6hn8SKVvwyt7xxL_YY4O9lAq312hH5CdUBGOVPubV2vjQVgpTS0KJChSvFg"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-i6hn8SKVvwyt7xxL_YY4O9lAq312hH5CdUBGOVPubV2vjQVgpTS0KJChSvFg\"}"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0fe8f3ab-b975-4022-ac59-c1a0ec22555d","keyName":"e2e-sub-iso-95e07e","subscription":"e2e-shared-sub-1000bf","tenant":"e2e-shared-b-17f250","userId":"0fe8f3ab-b975-4022-ac59-c1a0ec22555d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"699943c1-096e-4fba-a431-46803fbe8450","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/sub-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"699943c1-096e-4fba-a431-46803fbe8450","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1000bf"} {"level":"info","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"699943c1-096e-4fba-a431-46803fbe8450","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"699943c1-096e-4fba-a431-46803fbe8450","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d2e422a6a18843ebadb4ba7b5c6c65df3c1d26caffd98b4104d44bef736c53"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c67f6c0487953e0bc327e4a3bb3d217d382576ff76b647dcbb74b2d5249a6c"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcc3931ab13e5f06573d77fce6d4775031593b0bac7368577e2b8bcb098af547"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ecc00d0925e54ab76ce74e1cef79c4ec117716b289d87b8e00011b440479cf1"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/007d2eea44b45d504edb7ec6a5ba9a674397ee6f971af630407749afaaa31f92"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9301d496f10c832381c16547119667561fa13606fcc37016c486a8f2c0e7982f"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a231e2873dfabbc87f09dd0be79de535c50dfce09e159d8f78801b2a65a787e6"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05faab9d39184b00520ee0d65d721f2485fb15663c7a1b82becfeed16c720604"} {"level":"info","ts":"2026-07-07T15:16:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7dbc4163f8ccebfbffbdc9cda1d3de31c56d0e7608e9dfe0c4ea1fb5abd5397"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c39def05287cc902c76157616ebbf2e0216f25627899e11aa9a68ab06928702"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d59a1f2d12662fef185f891472bb4c923a12bffb4ef4f62aff310854aab57f0c"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/261fe82cb1ff7c98a08c8a6354057c1bae83877aaf18c943d2e22cd122bd4d98"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4239f806fef11d6e4c9b52d9d61a7119945c0104cf14f27d9c6a694b838f85bf"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19c9b603c99ddac4491b038b7a1e9cd7c8d818c7766516cf50d8d61bb8bf3125"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53ba9519349017745c9ab36c6b735dd1e71c5778b3d6ed1ae57b7c1b44724071"} {"level":"info","ts":"2026-07-07T15:16:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/469f6e0390165807f7b663075f0ebe387c16f22114c2bffdfecf58efeef593fc"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"error","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"error","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"} {"level":"debug","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"} {"level":"debug","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"} {"level":"error","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"error","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c903253b-4f8f-421f-a11e-de36439ba996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c903253b-4f8f-421f-a11e-de36439ba996","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c903253b-4f8f-421f-a11e-de36439ba996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":847072834},"http":{"id":"c903253b-4f8f-421f-a11e-de36439ba996","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c903253b-4f8f-421f-a11e-de36439ba996","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c903253b-4f8f-421f-a11e-de36439ba996","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":887258595},"http":{"id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5d2c606-ea19-4719-9024-416105727aa2","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":926162086},"http":{"id":"b5d2c606-ea19-4719-9024-416105727aa2","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5d2c606-ea19-4719-9024-416105727aa2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d2c606-ea19-4719-9024-416105727aa2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d2c606-ea19-4719-9024-416105727aa2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54582","PortSpecifier":{"PortValue":54582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54582","PortSpecifier":{"PortValue":54582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437473,"nanos":985483265},"http":{"id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54598","PortSpecifier":{"PortValue":54598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54598","PortSpecifier":{"PortValue":54598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437475,"nanos":45782186},"http":{"id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437487,"nanos":953228387},"http":{"id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67091bc8-a88e-469c-b176-ee6559d98ab4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437487,"nanos":994654118},"http":{"id":"67091bc8-a88e-469c-b176-ee6559d98ab4","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437488,"nanos":30204706},"http":{"id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17c012c6-e3c2-443c-9019-c52050b5b15b","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437489,"nanos":69253984},"http":{"id":"17c012c6-e3c2-443c-9019-c52050b5b15b","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437490,"nanos":138336034},"http":{"id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49784","PortSpecifier":{"PortValue":49784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623064c0-a952-442c-a0d1-44ad85b76fba","method":"POST","path":"/ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250/v1/completions","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49784","PortSpecifier":{"PortValue":49784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437490,"nanos":174008400},"http":{"id":"623064c0-a952-442c-a0d1-44ad85b76fba","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IwHYrIY7FfApGIH4_3AWFsqXJ1LEy71VrdfWa6580cRBGk4fudZ6JQGwvVZ6"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IwHYrIY7FfApGIH4_3AWFsqXJ1LEy71VrdfWa6580cRBGk4fudZ6JQGwvVZ6\"}"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","keyName":"e2e-rate-b-d493c8","subscription":"e2e-rate-iso-b-d493c8","tenant":"e2e-shared-b-17f250","userId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\",\"requestedSubscription\":\"e2e-rate-iso-b-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17f250","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d493c8","namespace":"ai-tenant-e2e-shared-b-17f250","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d493c8"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","keyName":"e2e-rate-b-d493c8","selected_subscription":"e2e-rate-iso-b-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-b-17f250/e2e-rate-iso-b-d493c8@ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17f250","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d493c8","namespace":"ai-tenant-e2e-shared-b-17f250","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"} {"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"} {"level":"info","ts":"2026-07-07T15:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"} {"level":"info","ts":"2026-07-07T15:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"}