--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a"} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7"} {"level":"info","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c451c5de-9165-4521-bc79-1a741c99edef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c451c5de-9165-4521-bc79-1a741c99edef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c451c5de-9165-4521-bc79-1a741c99edef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452777,"nanos":260220172},"http":{"id":"c451c5de-9165-4521-bc79-1a741c99edef","method":"POST","headers":{":authority":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c451c5de-9165-4521-bc79-1a741c99edef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c451c5de-9165-4521-bc79-1a741c99edef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7128c5b76fd626a7ade03ff4ffac5f53dd80a39155a0fb53d033e27749d78a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-a43967/test-model-a43967\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c451c5de-9165-4521-bc79-1a741c99edef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c451c5de-9165-4521-bc79-1a741c99edef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:32:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c451c5de-9165-4521-bc79-1a741c99edef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39184","PortSpecifier":{"PortValue":39184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"208036aa-8bdf-43cf-84e4-e921def8d689","method":"POST","path":"/ai-tenant-e2e-inf-a-a43967/test-model-a43967/v1/chat/completions","host":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39184","PortSpecifier":{"PortValue":39184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452781,"nanos":331241633},"http":{"id":"208036aa-8bdf-43cf-84e4-e921def8d689","method":"POST","headers":{":authority":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-a43967/test-model-a43967/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4UEVReoOPV60OPei_JLUxcWH29cy2QivdzJwpPW5KVcnjrREGgtODjXUScck"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-a43967.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4UEVReoOPV60OPei_JLUxcWH29cy2QivdzJwpPW5KVcnjrREGgtODjXUScck\"}"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-a43967.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"537897c9-59c0-447b-afbc-79fedb4243d1","keyName":"e2e-tenant-inference-a43967","subscription":"test-model-a43967-sub","tenant":"e2e-inf-a-a43967","userId":"537897c9-59c0-447b-afbc-79fedb4243d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-a43967.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-a43967/test-model-a43967\",\"requestedSubscription\":\"test-model-a43967-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-a43967.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-a43967","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-a43967-sub","namespace":"ai-tenant-e2e-inf-a-a43967","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-a43967/test-model-a43967\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-a43967-sub"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"537897c9-59c0-447b-afbc-79fedb4243d1","keyName":"e2e-tenant-inference-a43967","selected_subscription":"test-model-a43967-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-a43967/test-model-a43967-sub@ai-tenant-e2e-inf-a-a43967/test-model-a43967","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-a43967","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-a43967-sub","namespace":"ai-tenant-e2e-inf-a-a43967","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"208036aa-8bdf-43cf-84e4-e921def8d689","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39196","PortSpecifier":{"PortValue":39196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39196","PortSpecifier":{"PortValue":39196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452781,"nanos":639422409},"http":{"id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","method":"POST","headers":{":authority":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7128c5b76fd626a7ade03ff4ffac5f53dd80a39155a0fb53d033e27749d78a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-a43967.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-a43967/test-model-a43967\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"736ef5cc-9790-4dad-afa1-e1449cb11ccb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51540","PortSpecifier":{"PortValue":51540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","method":"POST","path":"/ai-tenant-e2e-inf-b-a4aa66/test-model-a4aa66/v1/chat/completions","host":"e2e-inf-b-a4aa66.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51540","PortSpecifier":{"PortValue":51540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452781,"nanos":694005103},"http":{"id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","method":"POST","headers":{":authority":"e2e-inf-b-a4aa66.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-a4aa66/test-model-a4aa66/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cUmOrWtCjx6zyHlm_7E5MVfIpa0HZBmbblJaD5tP4BWS8bw0tbWoLmOtTzu5"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-a4aa66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cUmOrWtCjx6zyHlm_7E5MVfIpa0HZBmbblJaD5tP4BWS8bw0tbWoLmOtTzu5\"}"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-a4aa66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-a4aa66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"173fc52fc587e31ba3c473110bc10a997bcf75dcc0c32327d9b42aba0b1d15f2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-a4aa66.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-a4aa66/test-model-a4aa66/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T19:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e7709d-bcd5-47c8-90da-f61aa02310f5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T19:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d2b09be0cfe21ea981821cf8430306fb8275e84d9597bb669b13d8b62f33a97"} {"level":"info","ts":"2026-07-07T19:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/706e7fa1d39e9ab730a7a501419ba469a7afca32e8216e8fd16d0fa3b80bc37f"} {"level":"info","ts":"2026-07-07T19:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3affecb37d75b0a291ecbc8a1e60bc4370195f2ea493d8ec58debb075b9834ea"} {"level":"info","ts":"2026-07-07T19:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe3079b3105c4719bfe0a60c4894164e7f1438f9c8df004e0645c6bd4de906c9"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68217b94dcd63a576dbf2e5599df20bc89a45cee5437c37da443f0b4b69f7a65"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9a1c294a61b60cd8b232bd4d96e9f7f9697feeeb6b07a9687fddc2d5d9f61a5"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35d1bc628a29126d782d44f289cc6704a2b7ae329a4d39d6352247127a6c047a"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d3bb39cb0263f505034272f47e530680f64aeccc39f6c8dd25dcbf12a39dc0"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30542e040c21a57a57552ba5912838522ca424553d680124625af2b040f8b646"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1abfbc9de999f463e08df557fb845ace5a964e280eb6ec776de7305855f7ceb2"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e221c6e5f0d7797ebadb6ab5387d1b1153c2d4a73f68872a55ecf7e72cce568"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c2f2bdcd15713d24dea4cba4127370b3df1c611b6d593bd7893cadd45ac93e7"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/173fc52fc587e31ba3c473110bc10a997bcf75dcc0c32327d9b42aba0b1d15f2"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ba4f683be58e82c25652e93963ab2f1d8e1e38e035492cb0b04057679eb2bfa"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7128c5b76fd626a7ade03ff4ffac5f53dd80a39155a0fb53d033e27749d78a6"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c393f8aa60c0e4580ff517c980e9023848374e33cd48a5e226ce6c83ccda38"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7546466440188c9f31aff1b1913da858bb6c90bdb465eeb64bafb27228df3b"} {"level":"info","ts":"2026-07-07T19:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/868313ee7d4f165bc7e3d982a1f9678665a4dcc0637ff1e1d24e7498aa6079cf"} {"level":"info","ts":"2026-07-07T19:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e725c5e0659bf92bf5bb51d736c905839d4b71b98d8650400659134c5990f21a"} {"level":"info","ts":"2026-07-07T19:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27875efc6ed137ba1074c8ba5b10bc181c72928abca0413b8c6d858ddc849140"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"} {"level":"error","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"} {"level":"info","ts":"2026-07-07T19:34:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88d3da2c7247730736e6010f06fec57afdca271c3dc7ce56d77188bc4e7e48e0"} {"level":"info","ts":"2026-07-07T19:34:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5a5cc0b76f1b48b56d4910f491b29056c23cda8747382457fa109f4c6fe5df1"} {"level":"info","ts":"2026-07-07T19:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f4758a8419e377a25ab4ddf0f72650e8b84225e10b9e44ec56d14bb3ce838b"} {"level":"info","ts":"2026-07-07T19:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be522f8fa80ed47a9374462d896a8129f04c68c29a1fe7e707165c0788e5f93"} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"error","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"debug","ts":"2026-07-07T19:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"error","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"error","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d"} {"level":"info","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f"} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f"} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3"} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42"} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3"} {"level":"info","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42"} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637"} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:35:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"info","ts":"2026-07-07T19:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36352","PortSpecifier":{"PortValue":36352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36352","PortSpecifier":{"PortValue":36352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452940,"nanos":595642915},"http":{"id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce12623-6d0f-4fe2-a0cb-1632852b8cb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47432","PortSpecifier":{"PortValue":47432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f238081-acc6-4747-acd8-e9e12d7ae453","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47432","PortSpecifier":{"PortValue":47432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452940,"nanos":659423932},"http":{"id":"6f238081-acc6-4747-acd8-e9e12d7ae453","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f238081-acc6-4747-acd8-e9e12d7ae453","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e551d4de-1d2e-4669-8718-c3aad828875c","method":"GET","path":"/maas-api/v1/api-keys/41f04c9c-4e72-47a7-ad2b-a1a462e6b3b8","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452940,"nanos":732552532},"http":{"id":"e551d4de-1d2e-4669-8718-c3aad828875c","method":"GET","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41f04c9c-4e72-47a7-ad2b-a1a462e6b3b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41f04c9c-4e72-47a7-ad2b-a1a462e6b3b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e551d4de-1d2e-4669-8718-c3aad828875c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47440","PortSpecifier":{"PortValue":47440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad8b703f-df74-4d70-8e3f-da08b4054899","method":"GET","path":"/maas-api/v1/api-keys/c2f558d0-1707-4ba7-a7f8-62aff3da4b84","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47440","PortSpecifier":{"PortValue":47440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452940,"nanos":772179529},"http":{"id":"ad8b703f-df74-4d70-8e3f-da08b4054899","method":"GET","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2f558d0-1707-4ba7-a7f8-62aff3da4b84",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2f558d0-1707-4ba7-a7f8-62aff3da4b84",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8b703f-df74-4d70-8e3f-da08b4054899","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47188","PortSpecifier":{"PortValue":47188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"085a0ded-7402-45fc-b8f4-20f37e89c285","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47188","PortSpecifier":{"PortValue":47188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452955,"nanos":844328221},"http":{"id":"085a0ded-7402-45fc-b8f4-20f37e89c285","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"085a0ded-7402-45fc-b8f4-20f37e89c285","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43864","PortSpecifier":{"PortValue":43864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43864","PortSpecifier":{"PortValue":43864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452955,"nanos":887495231},"http":{"id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7215e1f6-67f9-46c4-b8f4-4a18eecfe35b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47204","PortSpecifier":{"PortValue":47204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0c22911-2983-436e-ba60-0364adad4ce7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47204","PortSpecifier":{"PortValue":47204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452955,"nanos":929243926},"http":{"id":"d0c22911-2983-436e-ba60-0364adad4ce7","method":"GET","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WldY4CLOTG2smv1s_nrgHhUvKNFBLY17vjPqGJsg0FoSeY441ZkcbMkXJ1fh"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WldY4CLOTG2smv1s_nrgHhUvKNFBLY17vjPqGJsg0FoSeY441ZkcbMkXJ1fh\"}"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e6c4d45-03c1-4556-bde5-77b3bddc6350","keyName":"e2e-auth-iso-a-001151","subscription":"e2e-auth-iso-a87beb","tenant":"e2e-shared-a-c576d2","userId":"6e6c4d45-03c1-4556-bde5-77b3bddc6350","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a87beb"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:35:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c22911-2983-436e-ba60-0364adad4ce7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52332","PortSpecifier":{"PortValue":52332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"839f5fd0-e3fa-9692-b659-48fcd7340156","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52332","PortSpecifier":{"PortValue":52332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452973,"nanos":46823696},"http":{"id":"839f5fd0-e3fa-9692-b659-48fcd7340156","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"839f5fd0-e3fa-9692-b659-48fcd7340156","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57666","PortSpecifier":{"PortValue":57666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f64032e1-49c5-42a8-922c-2680892ad1b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57666","PortSpecifier":{"PortValue":57666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452973,"nanos":84273143},"http":{"id":"f64032e1-49c5-42a8-922c-2680892ad1b0","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f64032e1-49c5-42a8-922c-2680892ad1b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57668","PortSpecifier":{"PortValue":57668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83adfe9e-1017-4185-a67e-dd96f108acf2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57668","PortSpecifier":{"PortValue":57668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452973,"nanos":124384465},"http":{"id":"83adfe9e-1017-4185-a67e-dd96f108acf2","method":"GET","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iF57bMIQj9NQpSom_ikrkuCz9Z3yoHJGtlNxzGK9MNRLvq689LaQ46Z02nG"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iF57bMIQj9NQpSom_ikrkuCz9Z3yoHJGtlNxzGK9MNRLvq689LaQ46Z02nG\"}"} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T19:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83adfe9e-1017-4185-a67e-dd96f108acf2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452988,"nanos":245419388},"http":{"id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe622aa3-665c-4097-ad5a-3bcf12424d0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44938","PortSpecifier":{"PortValue":44938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44938","PortSpecifier":{"PortValue":44938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452988,"nanos":281367494},"http":{"id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645c3e1b-993a-455d-9844-fd15b06e0ce1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35668","PortSpecifier":{"PortValue":35668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc62a702-fb1c-4223-89e8-7d27984371cb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35668","PortSpecifier":{"PortValue":35668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452988,"nanos":324357960},"http":{"id":"fc62a702-fb1c-4223-89e8-7d27984371cb","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc62a702-fb1c-4223-89e8-7d27984371cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44948","PortSpecifier":{"PortValue":44948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44948","PortSpecifier":{"PortValue":44948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452988,"nanos":359825961},"http":{"id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9a7bc65-55da-4d9d-8819-4167e0c2c3f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57772","PortSpecifier":{"PortValue":57772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57772","PortSpecifier":{"PortValue":57772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453005,"nanos":524461252},"http":{"id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76dad7e7-4d1f-423e-90c5-f4fe74af23e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453005,"nanos":563694142},"http":{"id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f727fc9-a013-4373-b74a-aa07fc188ae3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","method":"GET","path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453005,"nanos":602966877},"http":{"id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","method":"GET","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f75dbc-c18e-4e44-b2a0-0a6bcc9afd02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57782","PortSpecifier":{"PortValue":57782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"236edafc-0d77-4c30-a286-47562dc5edd0","method":"GET","path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57782","PortSpecifier":{"PortValue":57782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453005,"nanos":641223246},"http":{"id":"236edafc-0d77-4c30-a286-47562dc5edd0","method":"GET","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fabb687c-9684-4e02-bc2f-24a30f1e43a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:36:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236edafc-0d77-4c30-a286-47562dc5edd0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba30d656-df4b-4223-a860-a2636a41aef8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453022,"nanos":991206235},"http":{"id":"ba30d656-df4b-4223-a860-a2636a41aef8","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba30d656-df4b-4223-a860-a2636a41aef8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"100fd097-67a4-477e-a680-9c02342651d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52844","PortSpecifier":{"PortValue":52844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"100fd097-67a4-477e-a680-9c02342651d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"100fd097-67a4-477e-a680-9c02342651d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52844","PortSpecifier":{"PortValue":52844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453023,"nanos":29736604},"http":{"id":"100fd097-67a4-477e-a680-9c02342651d1","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"100fd097-67a4-477e-a680-9c02342651d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"100fd097-67a4-477e-a680-9c02342651d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/auth-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"100fd097-67a4-477e-a680-9c02342651d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"100fd097-67a4-477e-a680-9c02342651d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"100fd097-67a4-477e-a680-9c02342651d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60716","PortSpecifier":{"PortValue":60716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60716","PortSpecifier":{"PortValue":60716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453023,"nanos":66683233},"http":{"id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kXdIDw7W19CteBOO_wQ4XBTWvlc37vtk4Q3YBnMaGZDHkr6iSEsY48wlUWHf"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kXdIDw7W19CteBOO_wQ4XBTWvlc37vtk4Q3YBnMaGZDHkr6iSEsY48wlUWHf\"}"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6e0245-f211-4ce7-91d7-9d4fddeee863","keyName":"e2e-auth-iso-a-ea0ccf","subscription":"e2e-auth-iso-3f6f64","tenant":"e2e-shared-a-c576d2","userId":"df6e0245-f211-4ce7-91d7-9d4fddeee863","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/auth-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3f6f64"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01861a49-bdb5-4e3b-81e9-49c20bd1b7c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f2fa756ad42b7e8e5668ff86d0aea56a1543e2442418257f35bf4f214d47c42"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a99b0bbb1531d53719630855a12fd9cbd5f0023b82d7946745cc778faaf1e33"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/991d373026effa985b1d6d5f62d8bbbc9105ac003da9958be5a69fe887b7ca7f"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60935081669ec3a5855e56d49ddaa96a24dbc44966692fc944639804f89fb71d"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a2d3f2f84a968d7fc60a87fef5141306ba383bc63395bac99e623d54ae36dda"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07ce96da0431f9812331fc613b9c4d41dd35d34b851e36863bd6c9dfb89c6dd"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc2ca54a8c1ae7a8759bbc0698730cde415651a86f0d939504a4aeac5bdd0b6"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e39e27c39660347e73b4cd41da8feb8ae4af07723f62e87dac41791089f54cf8"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8e87ddd76a65c76d2189c49eecc9946f21e952859b5bf10501ec353c315347"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/359164e85cc8116aabfc195196593faf29957349ce3902f9bef4be8bc0c8c082"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05dbd1de0cc1fb624e3e1bb139c4c2c56a7387bb80e80307a31ba4db3891d569"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e21e5e436cb4d4b2ccc68c8d352139312789879178b9d3218550681ae3c0e1f3"} {"level":"info","ts":"2026-07-07T19:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/194e65999c4670c66ff4ddfee5697a1db673762992178a3dba1a788fc2425fde"} {"level":"info","ts":"2026-07-07T19:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29e62aeb15524a7b67d452939a65d0d801804bacd7b537ec100c5953b008094"} {"level":"info","ts":"2026-07-07T19:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2ae8c2bbfb7fd48facfb6810018656ed90d6f6d561ddbe7c366a898c15ffa0e"} {"level":"info","ts":"2026-07-07T19:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26d2cb34edc4f461eb98c8ba03d53db3260449ec1fec64d7a1bd03705062c637"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"error","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:37:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:37:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"} {"level":"info","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"} {"level":"error","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"debug","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59568","PortSpecifier":{"PortValue":59568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59568","PortSpecifier":{"PortValue":59568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453086,"nanos":666810400},"http":{"id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/sub-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5e26d2-2c4d-4772-92aa-a7037cea6b97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55724","PortSpecifier":{"PortValue":55724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55724","PortSpecifier":{"PortValue":55724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453086,"nanos":709618431},"http":{"id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/sub-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45b2f19b-ecc5-4440-99cc-7293ed379cfe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59578","PortSpecifier":{"PortValue":59578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59578","PortSpecifier":{"PortValue":59578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453086,"nanos":751924381},"http":{"id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","method":"GET","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UWFFxQSbaVa4VlIi_BifETHTDZAHJ8JUfIbIU6rmPftc6n0PJGIFBQY335kN"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UWFFxQSbaVa4VlIi_BifETHTDZAHJ8JUfIbIU6rmPftc6n0PJGIFBQY335kN\"}"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4cb71da1-96fa-493f-9359-5b7f9e618393","keyName":"e2e-sub-iso-168282","subscription":"e2e-a-only-17db08","tenant":"e2e-shared-a-c576d2","userId":"4cb71da1-96fa-493f-9359-5b7f9e618393","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/sub-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-17db08"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbe07051-0fa0-4cdf-9b65-9461b1916a8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55728","PortSpecifier":{"PortValue":55728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"483dd0f4-6335-4173-b36c-e968c1e4277e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55728","PortSpecifier":{"PortValue":55728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453086,"nanos":792283741},"http":{"id":"483dd0f4-6335-4173-b36c-e968c1e4277e","method":"GET","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1396IHJd8e5O3wAYD_856edTAZxvrA61K4wt13NoGT5QbsQFbxxtgekkafQ9d"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1396IHJd8e5O3wAYD_856edTAZxvrA61K4wt13NoGT5QbsQFbxxtgekkafQ9d\"}"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa398f53-73ee-4653-8c52-999f9f00afc0","keyName":"e2e-sub-iso-bd6a94","subscription":"e2e-b-only-17db08","tenant":"e2e-shared-b-2620f1","userId":"aa398f53-73ee-4653-8c52-999f9f00afc0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/sub-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-17db08"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"483dd0f4-6335-4173-b36c-e968c1e4277e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49164","PortSpecifier":{"PortValue":49164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49164","PortSpecifier":{"PortValue":49164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453096,"nanos":821617838},"http":{"id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/sub-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c66ca19-0095-499c-b4f9-c20bdc6b61f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453096,"nanos":862049759},"http":{"id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/sub-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ede1a91-514a-4e07-a6ad-b8ba35c526a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49180","PortSpecifier":{"PortValue":49180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49180","PortSpecifier":{"PortValue":49180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453096,"nanos":900679277},"http":{"id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IAaiSb5ZIUUJGze5_6gZrHendgscoImy0zCz3XMVDy0iZrsVm7caXIHklSYl"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IAaiSb5ZIUUJGze5_6gZrHendgscoImy0zCz3XMVDy0iZrsVm7caXIHklSYl\"}"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20564235-3fe5-4927-bb4e-0895732e9563","keyName":"e2e-sub-iso-a478da","subscription":"e2e-shared-sub-efecdf","tenant":"e2e-shared-a-c576d2","userId":"20564235-3fe5-4927-bb4e-0895732e9563","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/sub-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-efecdf"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fc2db4-180c-4881-b18a-23bb2ce60be3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17782d5d-7838-468d-965c-837307c879c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45318","PortSpecifier":{"PortValue":45318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17782d5d-7838-468d-965c-837307c879c1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17782d5d-7838-468d-965c-837307c879c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45318","PortSpecifier":{"PortValue":45318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453096,"nanos":930249358},"http":{"id":"17782d5d-7838-468d-965c-837307c879c1","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JT6EAGAJxzKV32Oa_NAOizXuMeCEyMgPf64Xog5lfyoXPCYRItJxV7sIcCWv"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17782d5d-7838-468d-965c-837307c879c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JT6EAGAJxzKV32Oa_NAOizXuMeCEyMgPf64Xog5lfyoXPCYRItJxV7sIcCWv\"}"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b0a892c-3458-4692-b8c3-89bc924650fc","keyName":"e2e-sub-iso-ec8b47","subscription":"e2e-shared-sub-efecdf","tenant":"e2e-shared-b-2620f1","userId":"0b0a892c-3458-4692-b8c3-89bc924650fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17782d5d-7838-468d-965c-837307c879c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/sub-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17782d5d-7838-468d-965c-837307c879c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-efecdf"} {"level":"info","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17782d5d-7838-468d-965c-837307c879c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17782d5d-7838-468d-965c-837307c879c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bab4da8fb89a9553c398b60a5f6661ad57092c004f956d86f2f13f25ee43e82"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11e30b3b5a6211ce643a84c12778bc009885a9be7bf17601c42ea41d92172ef3"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e702d53b15ee326472015c6a9996a248e0b6da3c20dcb7239037c8a1be0d5502"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ee0bffd41fddf6e378f3f7ad4d835f5ecebac02820ae2f06a7d238157996ad5"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c99c75069bcc0d2e879d082cf0e406b64a689e58190874f47a48f5f634311a59"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672756c092978c2d1ffa88aaf0b17bc3f2aeaade1ca60ec3dcb984c096f5a746"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d86e1b6ca08931e6d307517d190157a5a879a7dedf961ae34d813c6cef1e471d"} {"level":"info","ts":"2026-07-07T19:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa0f73d08f957758c58b50b3ea9eae3861e15c3702c84bba8ab486c681ffaf53"} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"} {"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"} {"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"} {"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"} {"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"} {"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":315090151},"http":{"id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37240","PortSpecifier":{"PortValue":37240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37240","PortSpecifier":{"PortValue":37240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":360158163},"http":{"id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":401334021},"http":{"id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b94effd-688e-4af2-943e-1a26ea0a6217","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453176,"nanos":463244060},"http":{"id":"4b94effd-688e-4af2-943e-1a26ea0a6217","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57318","PortSpecifier":{"PortValue":57318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57318","PortSpecifier":{"PortValue":57318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453177,"nanos":501069995},"http":{"id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39942","PortSpecifier":{"PortValue":39942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39942","PortSpecifier":{"PortValue":39942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":326823992},"http":{"id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":371582875},"http":{"id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":410055616},"http":{"id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39960","PortSpecifier":{"PortValue":39960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3367a392-9614-92d6-8c25-c5620a662e68","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39960","PortSpecifier":{"PortValue":39960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453189,"nanos":451187048},"http":{"id":"3367a392-9614-92d6-8c25-c5620a662e68","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3367a392-9614-92d6-8c25-c5620a662e68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3367a392-9614-92d6-8c25-c5620a662e68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3367a392-9614-92d6-8c25-c5620a662e68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453190,"nanos":491688253},"http":{"id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","method":"POST","path":"/ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1/v1/completions","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453190,"nanos":529877820},"http":{"id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DOvruzZpyuDRigVf_WQV2HvAyXa1xG0AXJDBlJhpdWdhCgNm0kZ9f9BmMLfO"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DOvruzZpyuDRigVf_WQV2HvAyXa1xG0AXJDBlJhpdWdhCgNm0kZ9f9BmMLfO\"}"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1caf186c-fdac-4874-8355-a043d18b5a60","keyName":"e2e-rate-b-f67255","subscription":"e2e-rate-iso-b-f67255","tenant":"e2e-shared-b-2620f1","userId":"1caf186c-fdac-4874-8355-a043d18b5a60","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\",\"requestedSubscription\":\"e2e-rate-iso-b-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2620f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f67255","namespace":"ai-tenant-e2e-shared-b-2620f1","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f67255"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1caf186c-fdac-4874-8355-a043d18b5a60","keyName":"e2e-rate-b-f67255","selected_subscription":"e2e-rate-iso-b-f67255","selected_subscription_key":"ai-tenant-e2e-shared-b-2620f1/e2e-rate-iso-b-f67255@ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2620f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f67255","namespace":"ai-tenant-e2e-shared-b-2620f1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"} {"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"} {"level":"info","ts":"2026-07-07T19:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"} {"level":"info","ts":"2026-07-07T19:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"}