--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:10:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46428","PortSpecifier":{"PortValue":46428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46428","PortSpecifier":{"PortValue":46428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945445,"nanos":142444867},"http":{"id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db2dfb3-4974-4e9a-8366-b1478ae22566","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48552","PortSpecifier":{"PortValue":48552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfeca611-08c8-4163-a417-7edaacc432f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48552","PortSpecifier":{"PortValue":48552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945445,"nanos":178737942},"http":{"id":"bfeca611-08c8-4163-a417-7edaacc432f0","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfeca611-08c8-4163-a417-7edaacc432f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48568","PortSpecifier":{"PortValue":48568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48568","PortSpecifier":{"PortValue":48568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945445,"nanos":215616961},"http":{"id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","method":"GET","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RC7cNMNlieGidyVT_eN4ad0887vI8yrwNy5modiBU6EZct3pgo5MeWurWZi3"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RC7cNMNlieGidyVT_eN4ad0887vI8yrwNy5modiBU6EZct3pgo5MeWurWZi3\"}"} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-25T02:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4785ff72-49ab-4abc-9ddb-edf0c7fd1887","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:10:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"error","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"debug","ts":"2026-07-25T02:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"error","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"error","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56138","PortSpecifier":{"PortValue":56138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56138","PortSpecifier":{"PortValue":56138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945485,"nanos":424783110},"http":{"id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc075a6a-2fbf-498f-9d3c-0b7e5b1903eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41992","PortSpecifier":{"PortValue":41992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41992","PortSpecifier":{"PortValue":41992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945485,"nanos":459902982},"http":{"id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7c17e1d-7fb9-46ec-8cff-2fb509a32fa2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35536","PortSpecifier":{"PortValue":35536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35536","PortSpecifier":{"PortValue":35536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945485,"nanos":495728187},"http":{"id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff09bf0-ad69-46d6-b625-fb62ad1a9d9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4108800d-94b8-48dd-9201-6af5272873e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42002","PortSpecifier":{"PortValue":42002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4108800d-94b8-48dd-9201-6af5272873e2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4108800d-94b8-48dd-9201-6af5272873e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42002","PortSpecifier":{"PortValue":42002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945485,"nanos":534925032},"http":{"id":"4108800d-94b8-48dd-9201-6af5272873e2","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4108800d-94b8-48dd-9201-6af5272873e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4108800d-94b8-48dd-9201-6af5272873e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4108800d-94b8-48dd-9201-6af5272873e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4108800d-94b8-48dd-9201-6af5272873e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:11:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4108800d-94b8-48dd-9201-6af5272873e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:11:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34032","PortSpecifier":{"PortValue":34032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33ec2c59-b936-460b-a407-a8dfa8568c44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34032","PortSpecifier":{"PortValue":34032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945524,"nanos":544168221},"http":{"id":"33ec2c59-b936-460b-a407-a8dfa8568c44","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ec2c59-b936-460b-a407-a8dfa8568c44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51626","PortSpecifier":{"PortValue":51626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d688320e-67d4-4fc1-a21e-3129b772838f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51626","PortSpecifier":{"PortValue":51626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945524,"nanos":579728355},"http":{"id":"d688320e-67d4-4fc1-a21e-3129b772838f","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d688320e-67d4-4fc1-a21e-3129b772838f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51642","PortSpecifier":{"PortValue":51642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd74bdf3-4792-9042-bb01-14511dced65b","method":"GET","path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51642","PortSpecifier":{"PortValue":51642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945524,"nanos":617167072},"http":{"id":"cd74bdf3-4792-9042-bb01-14511dced65b","method":"GET","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd74bdf3-4792-9042-bb01-14511dced65b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","method":"GET","path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945524,"nanos":648084789},"http":{"id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","method":"GET","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf90ba-f0a9-4a39-8204-24c1e3d1c73f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beffcc69-8f49-4c5c-a5ec-3a07d57da5e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:12:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"error","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"error","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34182","PortSpecifier":{"PortValue":34182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b27258df-6a8a-4862-b43a-64f2e336948c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34182","PortSpecifier":{"PortValue":34182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945564,"nanos":859236241},"http":{"id":"b27258df-6a8a-4862-b43a-64f2e336948c","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b27258df-6a8a-4862-b43a-64f2e336948c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40644","PortSpecifier":{"PortValue":40644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40644","PortSpecifier":{"PortValue":40644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945564,"nanos":902608367},"http":{"id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/auth-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd8cf55-900e-4d06-8e19-5be1da8507ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34194","PortSpecifier":{"PortValue":34194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34194","PortSpecifier":{"PortValue":34194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945564,"nanos":937533494},"http":{"id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-112g7ACGHG34H9Q8g_uhEXzZFjd8PbRrPM3kIhP7D0CewwqnLFX0XjgulVagN"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-112g7ACGHG34H9Q8g_uhEXzZFjd8PbRrPM3kIhP7D0CewwqnLFX0XjgulVagN\"}"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ff18612-6082-4b23-86a0-21337d7481f9","keyName":"e2e-auth-iso-a-562b72","subscription":"e2e-auth-iso-4dc03a","tenant":"e2e-shared-a-7e06ec","userId":"3ff18612-6082-4b23-86a0-21337d7481f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/auth-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4dc03a"} {"level":"info","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:12:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d0c6a45-9685-4071-9864-149fe0c8cbd1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f32e227e7f82590d14c086d591f1e99252070b77efee04698e7ac34f7f2b8499"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3482ecb36b1aaebad6eac37ff4e3409b7f3acc8635bb48926527c8f2ee0407"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e5e0eaf403d4c1989d58024db87736dae890a0fbe73640b97942530c8e5969"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb078b7189cde429ddb84faff8ac1e39092fb15e0ff21ed83eeed71951433b89"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/239b39ab4408918edac12ab51b0ce456c9f4a884fdc7fd5a414122e0a901b803"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c6d559ca9755b1916a5d10ea024f915049c6f0ca6b8b66bf93bc315328ebc74"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bfdfed31a77e046035c5c7fecfe654524471977f75e88c26552fd51a7de30c"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd9db204c09894b5ab0174b5f54046001422b626a4238f6f3fd82b15f4649468"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06e79f0fe4ba9a1134c2105511ad62e5204af0abc1e04cda5f33327571a605d5"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72cc35323b08d28bbe93e48da682eaefc7d75bf2a95b894636b470d5d931225"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0cdf5af7ab471d0284b4efad107ff1fad1b3f10820172226a9098a4de266fc9"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9988d7bcf9504ce8a6a290d85f86e703a4fe61252605f492fccd0ab6f10bd110"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bb20224653b808127e21beac05663bea7772376fee7db3738935b97632f1c9d"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b4999d786b36e6f2159b7b6a36fce8fd5cf3229dd397da70613849d2c38f7d8"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0839fd2804669443906be6d69b2888a1ca9729e1b1d3b822c04f3f4edb966595"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b534d9e2c8c2a29de705080e923c3b8daabdfd1f5014db1fe07e524b4597e03"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:12:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"} {"level":"debug","ts":"2026-07-25T02:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:13:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1"} {"level":"info","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e"} {"level":"info","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57920","PortSpecifier":{"PortValue":57920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84bc572d-5331-4963-a3ef-3de2981b1723","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57920","PortSpecifier":{"PortValue":57920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945633,"nanos":955875315},"http":{"id":"84bc572d-5331-4963-a3ef-3de2981b1723","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/sub-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84bc572d-5331-4963-a3ef-3de2981b1723","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6322696-2dee-42ba-a40a-db055c8dcad8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945633,"nanos":993368893},"http":{"id":"a6322696-2dee-42ba-a40a-db055c8dcad8","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:13:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/sub-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6322696-2dee-42ba-a40a-db055c8dcad8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57928","PortSpecifier":{"PortValue":57928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57928","PortSpecifier":{"PortValue":57928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945634,"nanos":29771010},"http":{"id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","method":"GET","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ug4TdgbIfVPOa5Kd_tUTaJ0d4kQKWYil6VYWokw4HsndM7OuaCe3Saxv0SkT"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ug4TdgbIfVPOa5Kd_tUTaJ0d4kQKWYil6VYWokw4HsndM7OuaCe3Saxv0SkT\"}"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462e1667-7c6b-461e-bff6-ec59abe6b9ac","keyName":"e2e-sub-iso-3648ea","subscription":"e2e-a-only-8067c5","tenant":"e2e-shared-a-7e06ec","userId":"462e1667-7c6b-461e-bff6-ec59abe6b9ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/sub-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8067c5"} {"level":"info","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fa3f2a1-f69d-462a-96d1-1c778313ea98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47626","PortSpecifier":{"PortValue":47626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47626","PortSpecifier":{"PortValue":47626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945634,"nanos":68876533},"http":{"id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","method":"GET","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DBXBHLj2bqm4SEmR_yD6KBjYSEPjzfyxMuKJ2ferI0GAH3Rmg5uHNk7riN3j"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DBXBHLj2bqm4SEmR_yD6KBjYSEPjzfyxMuKJ2ferI0GAH3Rmg5uHNk7riN3j\"}"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d20e9adb-4399-4906-8a3d-b33aaa61a9a6","keyName":"e2e-sub-iso-df941c","subscription":"e2e-b-only-8067c5","tenant":"e2e-shared-b-575aa7","userId":"d20e9adb-4399-4906-8a3d-b33aaa61a9a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/sub-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8067c5"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:13:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9b6a4a5-2af7-49ec-9a30-77e10dd4c719","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945658,"nanos":818043405},"http":{"id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/sub-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f55d18d7-13c9-494a-9ab1-bb9b7526b8ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945658,"nanos":854603706},"http":{"id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/sub-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238abb7f-35f8-4292-a3e5-13f44ab4b435","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9aea26e-385e-4286-9629-38eb7b93b668","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945658,"nanos":887438689},"http":{"id":"e9aea26e-385e-4286-9629-38eb7b93b668","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DgPvXqjFuKVTj90e_ao1W4mhblJ8EwcBZrJrFWzJp3vh5GtHNxqapVQ6uaJn"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DgPvXqjFuKVTj90e_ao1W4mhblJ8EwcBZrJrFWzJp3vh5GtHNxqapVQ6uaJn\"}"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e194f9c0-a9e4-4b76-bf1d-78eaa29a2b32","keyName":"e2e-sub-iso-cca08f","subscription":"e2e-shared-sub-d35fb3","tenant":"e2e-shared-a-7e06ec","userId":"e194f9c0-a9e4-4b76-bf1d-78eaa29a2b32","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/sub-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d35fb3"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9aea26e-385e-4286-9629-38eb7b93b668","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c12f066-2f6b-4852-9578-400d3254743c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c12f066-2f6b-4852-9578-400d3254743c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c12f066-2f6b-4852-9578-400d3254743c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945658,"nanos":913713913},"http":{"id":"6c12f066-2f6b-4852-9578-400d3254743c","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QLlCBuTYOnjgKYyX_2ecZkKcxOLMlGrIzs2dgiAhTP6D5gn8d2Bwi4QFXzUZ"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QLlCBuTYOnjgKYyX_2ecZkKcxOLMlGrIzs2dgiAhTP6D5gn8d2Bwi4QFXzUZ\"}"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7865e4b5-fe78-4a7b-9287-4d496058ee69","keyName":"e2e-sub-iso-952760","subscription":"e2e-shared-sub-d35fb3","tenant":"e2e-shared-b-575aa7","userId":"7865e4b5-fe78-4a7b-9287-4d496058ee69","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c12f066-2f6b-4852-9578-400d3254743c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/sub-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d35fb3"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c12f066-2f6b-4852-9578-400d3254743c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c12f066-2f6b-4852-9578-400d3254743c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c12f066-2f6b-4852-9578-400d3254743c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/225061ba7f7739221de5095b00ec280d37c2ce4f651e7a5f969b005e761b1b22"} {"level":"info","ts":"2026-07-25T02:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a07388ba7b5c66c34d063147b640733e94c56b6a5ff57c0e0221327cfffb9bc6"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d91db03a0c2d984f94d2bbba3dd9d08d27ca6b21cb4f55b7ee5d64cce7d9f650"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304495d1ab4e947eedcd7de607394849bca21b355a87b33d6cdaef4619af42f3"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dab0fe8cb577d542b5e78666c8a36e592dc1fcd77866593ae6107bb25a0100e"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4f04fb44fb3b68d2762de9a1becdd6ee7c2647b4c972bd41b617f6e1455c3c9"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2830008d0d52303eb9436ffdbdf57b26401cdd75d510ba88e6b1fe9b670e44d1"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288684ac0eefe43e8f93683cb5b0c047841e36498ada6da9fe47f37c6aa6e59a"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/296953ac6c5153414b8110c9061b4a1cac88c1c802ce48b04655fe3886e2fcf6"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dd550c4123002f11f8a18dde2f9f84b636f849eb5752f7bb650e3b3ebc26793"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20bee5909ea09786aa357b68b2783dc3b0e8d335b36387d31d7643a85b7c04c4"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db344ce5188c07cd85a90e046055918cd8120d60f0f87bee114de12930962e07"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f1c968414e95f25685333740754f85bb74bb7b0854609378fbcaf5941451f4"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb7b5bb1250bc3be8ffd692152f83a3f6af06f4a11ceeff0675b4f1087a7a61e"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dfc6625e8228a7d4d86efdc140b90ae12c37acd71cbba19f0435cb2ebb22dbe"} {"level":"info","ts":"2026-07-25T02:14:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf7ccfcf74425d160fe97dd4145efe004284e3a5859722bd911ef573914fa55"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"error","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"error","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"error","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"} {"level":"error","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"} {"level":"error","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":830717527},"http":{"id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf1279d8-b6e9-42e8-8bb2-17a4da874d98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55692","PortSpecifier":{"PortValue":55692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68cb9466-e962-4af4-9e8a-af1b471ad794","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55692","PortSpecifier":{"PortValue":55692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":869267427},"http":{"id":"68cb9466-e962-4af4-9e8a-af1b471ad794","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cb9466-e962-4af4-9e8a-af1b471ad794","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53642","PortSpecifier":{"PortValue":53642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd2c8089-ea82-4e84-9303-b14e646f783f","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53642","PortSpecifier":{"PortValue":53642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945747,"nanos":931474792},"http":{"id":"cd2c8089-ea82-4e84-9303-b14e646f783f","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:15:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd2c8089-ea82-4e84-9303-b14e646f783f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945749,"nanos":25182555},"http":{"id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4760614a-8a1f-42d1-ada3-7a7575ba221d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53656","PortSpecifier":{"PortValue":53656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e88fa8db-3662-43a8-a25f-27373e3429d2","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53656","PortSpecifier":{"PortValue":53656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945750,"nanos":69231881},"http":{"id":"e88fa8db-3662-43a8-a25f-27373e3429d2","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I8DWZb8vcV1aGj2O_sMl09zoax9fCPjBYY1Oex1B0D7T8t81kPxdTrpOTw5b\"}"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","subscription":"e2e-rate-iso-a-841cb2","tenant":"e2e-shared-a-7e06ec","userId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-841cb2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-841cb2"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fbc4a98-497a-47a1-b7d4-7125c4d8852d","keyName":"e2e-rate-a-841cb2","selected_subscription":"e2e-rate-iso-a-841cb2","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-841cb2@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-841cb2","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:15:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88fa8db-3662-43a8-a25f-27373e3429d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"151d14ee-4605-47e0-8532-4111224e0c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39350","PortSpecifier":{"PortValue":39350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"151d14ee-4605-47e0-8532-4111224e0c22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"151d14ee-4605-47e0-8532-4111224e0c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39350","PortSpecifier":{"PortValue":39350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":506822722},"http":{"id":"151d14ee-4605-47e0-8532-4111224e0c22","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"151d14ee-4605-47e0-8532-4111224e0c22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"151d14ee-4605-47e0-8532-4111224e0c22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"151d14ee-4605-47e0-8532-4111224e0c22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"151d14ee-4605-47e0-8532-4111224e0c22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86089266-372b-4f8b-a875-7cc1fe8b384a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":551215053},"http":{"id":"86089266-372b-4f8b-a875-7cc1fe8b384a","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86089266-372b-4f8b-a875-7cc1fe8b384a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39352","PortSpecifier":{"PortValue":39352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c259fea5-0c14-4072-be14-67a2aebbadac","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39352","PortSpecifier":{"PortValue":39352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945776,"nanos":583719739},"http":{"id":"c259fea5-0c14-4072-be14-67a2aebbadac","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c259fea5-0c14-4072-be14-67a2aebbadac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945777,"nanos":631239172},"http":{"id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47e5ccf-4cc4-4116-96d9-1b513c4c5750","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","method":"POST","path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions","host":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945778,"nanos":668683953},"http":{"id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","method":"POST","headers":{":authority":"e2e-shared-a-7e06ec.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11PjPZCEf96jJtil0_FHn8Qcvyzl7Y7KDxGGFv87iQOIRcFS4Rx2KzzfbBlVV\"}"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","subscription":"e2e-rate-iso-a-15692e","tenant":"e2e-shared-a-7e06ec","userId":"92edea01-44d9-41a1-80eb-47ab57710e37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\",\"requestedSubscription\":\"e2e-rate-iso-a-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7e06ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15692e"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92edea01-44d9-41a1-80eb-47ab57710e37","keyName":"e2e-rate-a-15692e","selected_subscription":"e2e-rate-iso-a-15692e","selected_subscription_key":"ai-tenant-e2e-shared-a-7e06ec/e2e-rate-iso-a-15692e@ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-7e06ec/models/facebook/opt-125m","name":"rate-test-model-7e06ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15692e","namespace":"ai-tenant-e2e-shared-a-7e06ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7e06ec/rate-test-model-7e06ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2aa1a38-2ac0-4b30-9c84-fda523e63a79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51968","PortSpecifier":{"PortValue":51968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","method":"POST","path":"/ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7/v1/completions","host":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51968","PortSpecifier":{"PortValue":51968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945778,"nanos":703635183},"http":{"id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","method":"POST","headers":{":authority":"e2e-shared-b-575aa7.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2Hd3ToG7vyEZnfRF_q1nWPiES2iL9K7wavfdgttAm3VKWYDN9OZHPCooAyq8"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2Hd3ToG7vyEZnfRF_q1nWPiES2iL9K7wavfdgttAm3VKWYDN9OZHPCooAyq8\"}"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"388fe56b-f43c-47ae-90af-00213af58942","keyName":"e2e-rate-b-15692e","subscription":"e2e-rate-iso-b-15692e","tenant":"e2e-shared-b-575aa7","userId":"388fe56b-f43c-47ae-90af-00213af58942","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\",\"requestedSubscription\":\"e2e-rate-iso-b-15692e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-575aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m","name":"rate-test-model-575aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-15692e","namespace":"ai-tenant-e2e-shared-b-575aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7"}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-15692e"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"388fe56b-f43c-47ae-90af-00213af58942","keyName":"e2e-rate-b-15692e","selected_subscription":"e2e-rate-iso-b-15692e","selected_subscription_key":"ai-tenant-e2e-shared-b-575aa7/e2e-rate-iso-b-15692e@ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-575aa7/models/facebook/opt-125m","name":"rate-test-model-575aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-15692e","namespace":"ai-tenant-e2e-shared-b-575aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-575aa7/rate-test-model-575aa7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:16:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6dad2fa-7b21-4570-8c39-c16428aa6bf3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeea06af48d6201646745b8f322fbae8a390b1bdf576939f86f1fd136ec87004"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c301c7a4392938cb71f983792400607e82745c52009f598ea965fe516fed428"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e010136ebceeac1931b948c56cc675d440e92bae31f45702c256fd11b93a31b7"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27d3711f24247345ae5960160a23632cde3b2cada028944d6ed9e736c22cc2a5"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00974064e7656c02320af2446f72c4b055c7037ecc7ba2642a96881215d5dbfb"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efd16a90a7390e28805039c52d5c2c7368f90e8e41bdee2f209c702acc948c84"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b52bd8e792e01c388ae217873a96b2a0a3e1ca4cd7fb0d0b6a9ce4d4fefccf"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7109f408205edf6a17f639931eb4d84ad5815764734166750e859cfafbc87d41"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b29b7e86d7018998db8643b52feb0f294e245e99c44e512df353d31f8b70c70"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b51b39678f8f711edf6671964bde3453d09e419c49bdc7a8565a56a3010e9f6a"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5c169246e4c0030670367c2b35fd5cf01fe5d5666c8a26525c777772c79c252"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73512997a0a2385a9df81987793ce8e5f6916be2738c359bd74c2359b8290e0f"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf08a593b8be3d5d99dba0556c79325bb52579db267a3c872aefce6be77b34a0"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2e67a69a4246e05d431037f275ce1de5a2030039635a2c81f995ba04b4c969"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e771dde3d752558350164761ac756f840fa8b56710386d1ce1e6b499c0ae9251"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c6c8fd4d3d6446e0e842b17c207596ac8027ff781c870a72a6ec7af5803fa90"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0007962331cc153c88d32ce2364da0b606d1a3b7751cf76166df5a7554f894c"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e064f86626ee8ee1cf6c570e2a54ee9719d7d8717e861bb8c51b75497cfefc4c"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2f1ef87c7e513dcd8c2d956b060d8221f7c90e99dfb9d491c344dc0be38ed6"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40953b1aa02da4e272fa9bb255bc9caa8c31c82ee3d4885be56b632d53fb8abb"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b106a69126f1dab39a36144e4ac65790b2dbfbea773b27903e0208133eca55f"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16afe00ebdd4a6df3ddc78b9c2239c5af522cb68e029b6c56abb67efa717be52"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e712425cbdae27200eb5d2a23bfe425fa99c12aa5b7d39ed5a03ed7d4606c8c"} {"level":"info","ts":"2026-07-25T02:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ff253f849fa7a2e9ae0e1cd6f56ae169d8e6e6fd71329bfb3200f429f9bacd"} {"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75079b-1996-4558-b682-978c45be0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f75079b-1996-4558-b682-978c45be0c4a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75079b-1996-4558-b682-978c45be0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945845,"nanos":866783682},"http":{"id":"2f75079b-1996-4558-b682-978c45be0c4a","method":"POST","headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f75079b-1996-4558-b682-978c45be0c4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f75079b-1996-4558-b682-978c45be0c4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75079b-1996-4558-b682-978c45be0c4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75079b-1996-4558-b682-978c45be0c4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945845,"nanos":911612761},"http":{"id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","method":"POST","headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CONOwxVQTqAxBvu_D8Qu49LNRJ6VwyBrSnsNRGwfG2l4oIwDYDAOJWJycvW"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CONOwxVQTqAxBvu_D8Qu49LNRJ6VwyBrSnsNRGwfG2l4oIwDYDAOJWJycvW\"}"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d63ed7a-be00-4a30-a12e-92a8741fc4eb","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b88a10-8159-43ab-a037-d63ac1a0c27f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"} {"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"} {"level":"debug","ts":"2026-07-25T02:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"} {"level":"error","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"} {"level":"debug","ts":"2026-07-25T02:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-25T02:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-25T02:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"info","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945904,"nanos":66924704},"http":{"id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","method":"POST","headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"293834ef-29f7-49f9-bd4b-071170be78b3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"]}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abe235580731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=289b7d8d-e5b1-46ce-b7fb-c5bd6537f5b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"293834ef-29f7-49f9-bd4b-071170be78b3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:18:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310a2859-6e4f-45cd-b00f-d56d41c3b927","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0689ca89-4372-4554-8d8a-cbc00de3456c","method":"POST","path":"/ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46/v1/chat/completions","host":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784945906,"nanos":129771091},"http":{"id":"0689ca89-4372-4554-8d8a-cbc00de3456c","method":"POST","headers":{":authority":"e2e-ipp-a-67eb46.apps.055df1cb-2f78-43c3-830f-abe235580731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GThQkxqUOjZOYjym_afQkS8RLNKRsfFVKNmqEr7m9TLEZigyplIkkApmp0Kg"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GThQkxqUOjZOYjym_afQkS8RLNKRsfFVKNmqEr7m9TLEZigyplIkkApmp0Kg\"}"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f7426b5-41a3-486b-a946-9866196406f5","keyName":"e2e-ipp-67eb46","subscription":"ipp-route-67eb46-sub","tenant":"e2e-ipp-a-67eb46","userId":"7f7426b5-41a3-486b-a946-9866196406f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\",\"requestedSubscription\":\"ipp-route-67eb46-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-67eb46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m","name":"ipp-route-67eb46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-67eb46-sub","namespace":"ai-tenant-e2e-ipp-a-67eb46","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46"}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-67eb46-sub"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f7426b5-41a3-486b-a946-9866196406f5","keyName":"e2e-ipp-67eb46","selected_subscription":"ipp-route-67eb46-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46-sub@ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-67eb46/models/facebook/opt-125m","name":"ipp-route-67eb46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-67eb46-sub","namespace":"ai-tenant-e2e-ipp-a-67eb46","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-67eb46/ipp-route-67eb46"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-25T02:18:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0689ca89-4372-4554-8d8a-cbc00de3456c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e8d3cd1e89f2f682d544d58baa55c8122f899649f87dacc8ab3e7e965a23a69"} {"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65eebfce31836c42e53d982335b9a05a9b7ae1f9b16254d0296323726fccc400"} {"level":"info","ts":"2026-07-25T02:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9a4896349ab27b86feeda0725aa8f6986ae749b03c9832e6fe2935a19b4d8c"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e54193ddc595598b5712c75edfa1d640c2462ae148997c2a76a38ee430e26cf"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8edba7a473e84ea2b584a3c496c28074882dc7eafa1b0affe56fe6587861f179"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0788e8b500cd5ccd2374a4baeffe99df9deeaed8c5c8fd15fe03cf5287f971f8"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c26557ac6283163853ac7f61330862d814e4deba621c891d435b65f1978cd533"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/032280dc8eccc45fefaa5f8f1dff6fb04c88d921781363b18480cd49594248cf"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da3eda7fcb6b82b1c26b7e89d6ed0d11aaba301fcc18f805a7e3acaec3c3b486"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8798240032b513bbb9da618f636da62015423d3b39e2c96cc89b65f15da70c55"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb58008f49a29591f59b70afbffb85483fa7e34f07db346bc97c8be2b805ae55"} {"level":"info","ts":"2026-07-25T02:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3289144df29904e1eea263f2cf561f740486f7609b31300947c6d189532ae19f"}