--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"error","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35828","PortSpecifier":{"PortValue":35828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35828","PortSpecifier":{"PortValue":35828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182544,"nanos":496627579},"http":{"id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f4d7f2-591a-485e-a2ae-51cdd79a461f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43246","PortSpecifier":{"PortValue":43246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43246","PortSpecifier":{"PortValue":43246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182544,"nanos":539667542},"http":{"id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/auth-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c11c98c7-0285-4b49-a1d9-a82ed83570cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35832","PortSpecifier":{"PortValue":35832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35832","PortSpecifier":{"PortValue":35832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182544,"nanos":582360668},"http":{"id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4782b7-2da2-4b34-98ff-e77cf2e628b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4173d487-f43b-9af6-a93c-e188727add56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43258","PortSpecifier":{"PortValue":43258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4173d487-f43b-9af6-a93c-e188727add56","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4173d487-f43b-9af6-a93c-e188727add56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43258","PortSpecifier":{"PortValue":43258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182544,"nanos":621549085},"http":{"id":"4173d487-f43b-9af6-a93c-e188727add56","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4173d487-f43b-9af6-a93c-e188727add56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4173d487-f43b-9af6-a93c-e188727add56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/auth-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4173d487-f43b-9af6-a93c-e188727add56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4173d487-f43b-9af6-a93c-e188727add56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4173d487-f43b-9af6-a93c-e188727add56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:02:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"error","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"error","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"debug","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56534","PortSpecifier":{"PortValue":56534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef67b25e-acca-4d56-a971-4641a1c1e426","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56534","PortSpecifier":{"PortValue":56534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182590,"nanos":591521710},"http":{"id":"ef67b25e-acca-4d56-a971-4641a1c1e426","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef67b25e-acca-4d56-a971-4641a1c1e426","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57424","PortSpecifier":{"PortValue":57424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182590,"nanos":630051797},"http":{"id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/auth-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b91bfb4-48a6-43b7-ba3d-9d43f4660ff5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57430","PortSpecifier":{"PortValue":57430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19b6426d-5148-48a2-b34e-0bd968a43943","method":"GET","path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57430","PortSpecifier":{"PortValue":57430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182590,"nanos":666391681},"http":{"id":"19b6426d-5148-48a2-b34e-0bd968a43943","method":"GET","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/auth-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b6426d-5148-48a2-b34e-0bd968a43943","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b355d6ad-541f-472c-a105-08b2c4979054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56546","PortSpecifier":{"PortValue":56546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b355d6ad-541f-472c-a105-08b2c4979054","method":"GET","path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b355d6ad-541f-472c-a105-08b2c4979054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56546","PortSpecifier":{"PortValue":56546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182590,"nanos":698028245},"http":{"id":"b355d6ad-541f-472c-a105-08b2c4979054","method":"GET","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b355d6ad-541f-472c-a105-08b2c4979054","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b355d6ad-541f-472c-a105-08b2c4979054","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cafeec34-156e-45c8-9404-8f44248d2658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b355d6ad-541f-472c-a105-08b2c4979054","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b355d6ad-541f-472c-a105-08b2c4979054","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b355d6ad-541f-472c-a105-08b2c4979054","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:03:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"error","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"error","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"error","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"error","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50744","PortSpecifier":{"PortValue":50744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50744","PortSpecifier":{"PortValue":50744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182636,"nanos":667256698},"http":{"id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c5e6a68-3095-499c-9755-6f77f1bcf0af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182636,"nanos":702844947},"http":{"id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/auth-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f45c2d7a-7808-4979-bd58-f58368a9dc5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50756","PortSpecifier":{"PortValue":50756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66a2cee1-402a-43db-a500-4899cd51cd12","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50756","PortSpecifier":{"PortValue":50756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182636,"nanos":740431203},"http":{"id":"66a2cee1-402a-43db-a500-4899cd51cd12","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B0g6ZbfyMeDXtKvz_V8qRpzNsmR8UCFFeII7rNPbKjamvrPriXGBhXcQsMOI"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B0g6ZbfyMeDXtKvz_V8qRpzNsmR8UCFFeII7rNPbKjamvrPriXGBhXcQsMOI\"}"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab29c465-c2ff-4e1a-84c0-a68d58a10bb4","keyName":"e2e-auth-iso-a-a14be1","subscription":"e2e-auth-iso-1a3683","tenant":"e2e-shared-a-4289a9","userId":"ab29c465-c2ff-4e1a-84c0-a68d58a10bb4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/auth-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1a3683"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:03:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66a2cee1-402a-43db-a500-4899cd51cd12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:04:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fe818d0fafb6ff21e88469560d24a064f87acee5df0713558555a1ac66c5407"} {"level":"info","ts":"2026-07-27T20:04:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6343068280474a5dc13aa329a7dc3bd15467f8b3c407887cfc47d4ccf22dbfe4"} {"level":"info","ts":"2026-07-27T20:04:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baacf693ffc65b4fb433b84d9ca16acac0e8be1bc27c7566b19fe4ba72167cc5"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf42acd94fc4545a1532dae413c01839fe488cf3e090f49afefa828e8a6ff6f1"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28aa72b399451e83facf57afa01f5b3014374781864527d78e9a9a006738a7ab"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30e1d89854a42da0e203e42e2ee75d26e432137501a6f6e76c79abfcf2254d0b"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/223131e65514762a7c888b46e1b93d53cbe14d3716556abb310472a503f8b61b"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4232bfab0ee92d2dcad2f04a415c22aeed84f1fb26f8c005fae1ea6d5a27140"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415a2d70009e1a622fdab1d2c5220ebf40a9b39e08325f6557c55048bf8faf2d"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69bf0ecfc4001503b955518ff733b51af30652685fc47bb616d4e3ed72cdb2e"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ef318ed4a7bc15a5e1b26a338dc306abf5ecdefdcfb8fff6cc8b44819245111"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8bbd8e42c2fd45c90aa90a52aed217bbb18e3fb5895d5a352e19113654064f3"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd0bb05549c02b16fa7079f4f26e714cc0c3937dabe1e5a1217386c0bb5a5aa"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58134df05a60e194124a35f4544ddc7b7427e54c1a0b0745bc2f7d87b0043094"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b87a3956da7c12d39e9a76cd1d1843cd61fbd3f9c192dc900080e7bacd3d055"} {"level":"info","ts":"2026-07-27T20:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091a81fe6e06716fed6aae923d9186675cc528daefb2d23905f3cc5d69c8ad4a"} {"level":"debug","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"debug","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"debug","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"error","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"error","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"error","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"error","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41245fe5-5855-46ac-ae56-719a12318933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54904","PortSpecifier":{"PortValue":54904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41245fe5-5855-46ac-ae56-719a12318933","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41245fe5-5855-46ac-ae56-719a12318933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54904","PortSpecifier":{"PortValue":54904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182721,"nanos":241115902},"http":{"id":"41245fe5-5855-46ac-ae56-719a12318933","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41245fe5-5855-46ac-ae56-719a12318933","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41245fe5-5855-46ac-ae56-719a12318933","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/sub-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41245fe5-5855-46ac-ae56-719a12318933","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41245fe5-5855-46ac-ae56-719a12318933","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41245fe5-5855-46ac-ae56-719a12318933","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39990","PortSpecifier":{"PortValue":39990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39990","PortSpecifier":{"PortValue":39990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182721,"nanos":293853139},"http":{"id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/sub-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a6e9ae-e345-4f0f-a76b-89922a2bf4a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54908","PortSpecifier":{"PortValue":54908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54908","PortSpecifier":{"PortValue":54908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182721,"nanos":352082385},"http":{"id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","method":"GET","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hCqE4pEl20DSAzJt_3jX97B3rmXeqbCtL0DZwUunJcWWPNt2gXLi0GyMT33n"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hCqE4pEl20DSAzJt_3jX97B3rmXeqbCtL0DZwUunJcWWPNt2gXLi0GyMT33n\"}"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a8ac9180-b3fc-4e90-8435-450960d95509","keyName":"e2e-sub-iso-9ff400","subscription":"e2e-a-only-900c01","tenant":"e2e-shared-a-4289a9","userId":"a8ac9180-b3fc-4e90-8435-450960d95509","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/sub-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-900c01"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f099deb-d8d0-42b7-a250-dfafcc90dfe9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39994","PortSpecifier":{"PortValue":39994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39994","PortSpecifier":{"PortValue":39994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182721,"nanos":392906433},"http":{"id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","method":"GET","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cjgv1jWyyVHzJNyz_asPaGt6BMiHwVkPnqjbzrkXoQc7jJ4v5M6W93D1y9Ak"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cjgv1jWyyVHzJNyz_asPaGt6BMiHwVkPnqjbzrkXoQc7jJ4v5M6W93D1y9Ak\"}"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ebbad74-5499-4222-bfa5-ad59d2a4f2f4","keyName":"e2e-sub-iso-90e899","subscription":"e2e-b-only-900c01","tenant":"e2e-shared-b-f99bfd","userId":"3ebbad74-5499-4222-bfa5-ad59d2a4f2f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/sub-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-900c01"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6467c8-2a80-46a4-a35e-42f8598cbc99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57528","PortSpecifier":{"PortValue":57528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57528","PortSpecifier":{"PortValue":57528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182741,"nanos":782355734},"http":{"id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/sub-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef2e41ca-31da-4a32-940e-a6c85765eddf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56362","PortSpecifier":{"PortValue":56362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56362","PortSpecifier":{"PortValue":56362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182741,"nanos":818710300},"http":{"id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/sub-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b2c6d0-5ea3-410c-b418-d345ff2e367f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57538","PortSpecifier":{"PortValue":57538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57538","PortSpecifier":{"PortValue":57538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182741,"nanos":853673402},"http":{"id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7Xd1YOEBA8JH7rud_Y75BSYSRe2Yar7fArLGM8nDFu0JK769i2IYOQAqEjpM"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7Xd1YOEBA8JH7rud_Y75BSYSRe2Yar7fArLGM8nDFu0JK769i2IYOQAqEjpM\"}"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"234d8e6a-a782-4f26-aa12-b0bba773d7cd","keyName":"e2e-sub-iso-4befeb","subscription":"e2e-shared-sub-04152e","tenant":"e2e-shared-a-4289a9","userId":"234d8e6a-a782-4f26-aa12-b0bba773d7cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/sub-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-04152e"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d062ea50-df03-40bc-b539-ba7b6e25f7cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56372","PortSpecifier":{"PortValue":56372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56372","PortSpecifier":{"PortValue":56372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182741,"nanos":881599187},"http":{"id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ObeDo49ho0Kv2SWv_lfCSxi68T62kQw70QzJUjOmc7uE5YLWbrglZFpuaiZA"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ObeDo49ho0Kv2SWv_lfCSxi68T62kQw70QzJUjOmc7uE5YLWbrglZFpuaiZA\"}"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e7b561f-a2b1-4252-97c9-f615a01d89cc","keyName":"e2e-sub-iso-a51d0d","subscription":"e2e-shared-sub-04152e","tenant":"e2e-shared-b-f99bfd","userId":"3e7b561f-a2b1-4252-97c9-f615a01d89cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/sub-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-04152e"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:05:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a7d99f-425d-429a-aa32-5a73bbdf3260","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51e5de7dbacb7350e7540a63a436d296ab513fd3fdcc9e600d350ab75ce6c5f0"} {"level":"info","ts":"2026-07-27T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/836e7634cadeb0216b0c0f0f569d0f4b905b764604d10dd65cad17f8016ed3cc"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d31e74019aee8113b62687a54fb3db8607a57cebafd9709a5f301c8505611fea"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c8e8f4c82d7a466a1b91bda0bd12cf0fb908b9b66b1a42f51baf68439a7f369"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6e913395d269a34ad1342837bbc27e24ed7545c6b4a22082e07c62d11b84a9"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d4fb98ce3a80378f92871fa2d703da5cdf2846209eebac931d56ec2569e4f0"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/730dfe3ffd30f648f8eefeffb47d8cb61faf76740bd7a32587befb427559e3fd"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/696f1a6b979089b4011a35f8ed1e9e5c44193e45dc23e4a68da3ca56bf6a481c"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b40caf8c220ecdcc096bf8c4392a054f02cd5c820391ae8520277e7f00cdc98"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aad2a4ee92b078cb527089d4d92c4e2d2c57393ec9e3e3167419f3340bbf96f8"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27347c7b08c570b39799b31e2ad4ba53fd95979765eefc34b2a545912155ecf9"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0396603558eae97db43a85b2234ae363030d43ed573e4b5ba118ee329ad8d6dc"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9801ea2e9c6cec09aff3b2ac0b1aede1fb8b957a928de97473e863b208c0ca91"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5ec8ea7130fb6b546f680da7c656747b4bc8ff9a0b7c8fd08a61ffa6ea8020a"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1be2b701db2d10d637e7e1409c2fc307536ad619f9ca60dda362bb7aba7574d5"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2337de4b74febeb9cc15634d7f0f53a8a7fdb62bdc7ea83d8359810cf574276a"} {"level":"info","ts":"2026-07-27T20:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0"} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03"} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"} {"level":"error","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"error","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"error","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"} {"level":"info","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:06:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:06:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"debug","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:06:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:06:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:06:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43124","PortSpecifier":{"PortValue":43124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8666f52f-83f3-4a97-8101-da8001cdb505","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43124","PortSpecifier":{"PortValue":43124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182838,"nanos":536984379},"http":{"id":"8666f52f-83f3-4a97-8101-da8001cdb505","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8666f52f-83f3-4a97-8101-da8001cdb505","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45726","PortSpecifier":{"PortValue":45726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b74be892-7ac2-4b31-b71e-e3043999e935","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45726","PortSpecifier":{"PortValue":45726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182838,"nanos":582218189},"http":{"id":"b74be892-7ac2-4b31-b71e-e3043999e935","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74be892-7ac2-4b31-b71e-e3043999e935","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43138","PortSpecifier":{"PortValue":43138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43138","PortSpecifier":{"PortValue":43138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182838,"nanos":622704370},"http":{"id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN\"}"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","subscription":"e2e-rate-iso-a-e50d73","tenant":"e2e-shared-a-4289a9","userId":"49096aad-65e5-41a8-944c-c9e23c18a180","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-e50d73\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e50d73"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","selected_subscription":"e2e-rate-iso-a-e50d73","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-e50d73@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3708c1-037a-4d53-89b2-fc639cf5b6b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43148","PortSpecifier":{"PortValue":43148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43148","PortSpecifier":{"PortValue":43148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182839,"nanos":714826462},"http":{"id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN\"}"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","subscription":"e2e-rate-iso-a-e50d73","tenant":"e2e-shared-a-4289a9","userId":"49096aad-65e5-41a8-944c-c9e23c18a180","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-e50d73\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e50d73"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","selected_subscription":"e2e-rate-iso-a-e50d73","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-e50d73@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2b3b15-a4af-475a-8708-ccf84a97e413","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43160","PortSpecifier":{"PortValue":43160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43160","PortSpecifier":{"PortValue":43160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182840,"nanos":759414613},"http":{"id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LDw5LosLnhIyRaBn_nTPn7YbmjYE8f3Kclv9g2eFUlYYyEkNsZzJj35EhgIN\"}"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","subscription":"e2e-rate-iso-a-e50d73","tenant":"e2e-shared-a-4289a9","userId":"49096aad-65e5-41a8-944c-c9e23c18a180","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-e50d73\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e50d73"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49096aad-65e5-41a8-944c-c9e23c18a180","keyName":"e2e-rate-a-e50d73","selected_subscription":"e2e-rate-iso-a-e50d73","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-e50d73@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e50d73","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4103e3-6b66-40e5-be35-2a9df93b94d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182858,"nanos":991611259},"http":{"id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c307e348-2e8f-42a1-8fff-c0fbb267e455","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33558","PortSpecifier":{"PortValue":33558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33558","PortSpecifier":{"PortValue":33558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182859,"nanos":28317310},"http":{"id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d4a2150-abf9-45bc-bbad-5f73db190cb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40700","PortSpecifier":{"PortValue":40700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40700","PortSpecifier":{"PortValue":40700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182859,"nanos":57309128},"http":{"id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK\"}"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","subscription":"e2e-rate-iso-a-a23cf8","tenant":"e2e-shared-a-4289a9","userId":"b07bde09-7aa0-4022-a530-af394d5b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-a23cf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a23cf8"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","selected_subscription":"e2e-rate-iso-a-a23cf8","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-a23cf8@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c5c0fb-00d9-4f7c-8c40-0510ed92f2f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40708","PortSpecifier":{"PortValue":40708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40708","PortSpecifier":{"PortValue":40708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182860,"nanos":97928580},"http":{"id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK\"}"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","subscription":"e2e-rate-iso-a-a23cf8","tenant":"e2e-shared-a-4289a9","userId":"b07bde09-7aa0-4022-a530-af394d5b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-a23cf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a23cf8"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","selected_subscription":"e2e-rate-iso-a-a23cf8","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-a23cf8@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0fba270-548e-4eaf-b8d9-5def5284dd8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","method":"POST","path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions","host":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182861,"nanos":159335284},"http":{"id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","method":"POST","headers":{":authority":"e2e-shared-a-4289a9.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-193iNnHHNj9KHj3Je_iAhqwovGFYeeye8f3PEqfPTKl0g1I6TtyRnW2DLDMqK\"}"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","subscription":"e2e-rate-iso-a-a23cf8","tenant":"e2e-shared-a-4289a9","userId":"b07bde09-7aa0-4022-a530-af394d5b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\",\"requestedSubscription\":\"e2e-rate-iso-a-a23cf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4289a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a23cf8"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b07bde09-7aa0-4022-a530-af394d5b44c9","keyName":"e2e-rate-a-a23cf8","selected_subscription":"e2e-rate-iso-a-a23cf8","selected_subscription_key":"ai-tenant-e2e-shared-a-4289a9/e2e-rate-iso-a-a23cf8@ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4289a9/models/facebook/opt-125m","name":"rate-test-model-4289a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a23cf8","namespace":"ai-tenant-e2e-shared-a-4289a9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4289a9/rate-test-model-4289a9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5bb80ca-6c17-48d6-a8d7-6565cd23487d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33574","PortSpecifier":{"PortValue":33574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","method":"POST","path":"/ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd/v1/completions","host":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33574","PortSpecifier":{"PortValue":33574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182861,"nanos":195742601},"http":{"id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","method":"POST","headers":{":authority":"e2e-shared-b-f99bfd.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18V4QbVHaQzcJdiLr_w7bSD9w5QpOqADJdjOuoTtQt6wA98QVEV8DrJlUZgnb"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18V4QbVHaQzcJdiLr_w7bSD9w5QpOqADJdjOuoTtQt6wA98QVEV8DrJlUZgnb\"}"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bef662bc-55f2-4616-9a64-7d37df7a89da","keyName":"e2e-rate-b-a23cf8","subscription":"e2e-rate-iso-b-a23cf8","tenant":"e2e-shared-b-f99bfd","userId":"bef662bc-55f2-4616-9a64-7d37df7a89da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd\",\"requestedSubscription\":\"e2e-rate-iso-b-a23cf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f99bfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m","name":"rate-test-model-f99bfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a23cf8","namespace":"ai-tenant-e2e-shared-b-f99bfd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd"}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a23cf8"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bef662bc-55f2-4616-9a64-7d37df7a89da","keyName":"e2e-rate-b-a23cf8","selected_subscription":"e2e-rate-iso-b-a23cf8","selected_subscription_key":"ai-tenant-e2e-shared-b-f99bfd/e2e-rate-iso-b-a23cf8@ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f99bfd/models/facebook/opt-125m","name":"rate-test-model-f99bfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a23cf8","namespace":"ai-tenant-e2e-shared-b-f99bfd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f99bfd/rate-test-model-f99bfd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef5dcc1-ee94-44e2-bdcc-c2960d9b6c97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd2268cfacaa56d498ea09df54dfc5143419d19f8feff77bc786996db312d39"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b450c51818c0d54198826de85578415b52dfcadf3878ab0a4058c290de38e03"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2625a3c0bd657b864ed2b488ee7e493be42ee808917f9fec8d3b4a9d1cb99951"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e3fef797fafaddd5c726c7009fae06aa7588fbd5f263395b8134c251a43fac9"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b3d02f031c714b4a4a443f0dadff8c3336ef39d83c49211b203e86e1ded9481"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/257c25933a85ed6bc888da98a7ed5324eaba0a1810e10f3f9b84dd73b86ee5d1"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b237e52cc3398358adb99cb86016506d38137cd78c7deab98f439a44fe3cab2d"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ee06bf65bf834a664334c5099112748e5f53dec668616ed8f4ab3ac349f24f"} {"level":"info","ts":"2026-07-27T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f3b1ef30c0dcb306703e60c9e7d727add294a051b94bf11e7b284a330731f90"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29ea02dbfb4ffd2ed52ebc5703f03001cafd988a3265fa7b872ae66c3d7dae04"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a43dca4ecad1b237087e7b3b974a2f5070b6afde7827052fa0c25fa3c080f33"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7051d0d91b902826220232db64ca9edd333af57a071981b7d0434cf92f2970b2"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19878e89efeab9d83d7a8533d346bd960e72a8157eb274d4283f41f4e358c949"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/955bdd440320526efaef9262b9d5ca860e781cf06c55c501a331f6460e9ec140"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18704d1f4381c8e3fd86c7225bec7079f1e4ba8236c512688ccf4761636d5094"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6b4a6df9ba6578a4f74aff5b4a6fc96c1e09247126a9c809415401dd2e31490"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad20e4b1c16265cddd6ce7590b5e9f142f4dfeafdd3f3e555955dd24847f06c7"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107028212afa92bee0311d415d5f0e86acfdd3d0c0bc58da8585ade1242eb5f8"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aea5f73ccc803c619b1a86734a3d8b8a6718f2361d6e0d528c47c03150e6971"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28c3b82da2dfde4e4cc3fef77137b563782f4c4ae0b5240bc476f3e0e7bb72b0"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f622e94f9885ae3498cac5701d191c1e74148de4543d670fd67bb47073b9286b"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff250cd54400164902bccaf51a3dbceddfc76a639ed358d411057e51f361764"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd11149f3e262ca017998307f66765fdf4677a411fd44f202916ddb98676ad95"} {"level":"info","ts":"2026-07-27T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6d577bf2fb83614d246cc183c41683d7f4a054a04e1bf96980b1afe54a71219"} {"level":"info","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51102","PortSpecifier":{"PortValue":51102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51102","PortSpecifier":{"PortValue":51102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182927,"nanos":337366982},"http":{"id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","method":"POST","headers":{":authority":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7ab4dbb-b147-44aa-9016-f698ef76084f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182927,"nanos":395190092},"http":{"id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","method":"POST","headers":{":authority":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AuNv4R4SNfXCIYqA_AOpaGIagrGClZMaoXD8U4Lw21bIVKGFfHbUBh2zaFXs"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AuNv4R4SNfXCIYqA_AOpaGIagrGClZMaoXD8U4Lw21bIVKGFfHbUBh2zaFXs\"}"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36a8a73e-9d7a-439f-83e0-71e9e22d6d86","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"36a8a73e-9d7a-439f-83e0-71e9e22d6d86","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36a8a73e-9d7a-439f-83e0-71e9e22d6d86","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a56cb7-c030-4fa5-9305-f01b219c5809","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"info","ts":"2026-07-27T20:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"} {"level":"error","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:09:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:09:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:09:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48016","PortSpecifier":{"PortValue":48016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-58c998.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48016","PortSpecifier":{"PortValue":48016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182977,"nanos":408034575},"http":{"id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","method":"POST","headers":{":authority":"e2e-ipp-a-58c998.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"]}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d55d9da7d033"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690ef2bd-4a38-42a3-abf6-4bcf0f278444"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5b0b01e7-adcb-4d49-807c-8680e7a4fb5a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-58c998.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-58c998/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72c829f1-75c6-458d-a19c-fe1fe59123ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48030","PortSpecifier":{"PortValue":48030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","method":"POST","path":"/ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998/v1/chat/completions","host":"e2e-ipp-a-58c998.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48030","PortSpecifier":{"PortValue":48030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785182979,"nanos":472026603},"http":{"id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","method":"POST","headers":{":authority":"e2e-ipp-a-58c998.apps.313344d7-fe39-4dc5-834d-d55d9da7d033.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gLM8VAMz3F13IjX6_9PmjsKMBciQUbU1JqvOqClZew7Z5Y1VpCBIS1X7l8ft"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-58c998.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gLM8VAMz3F13IjX6_9PmjsKMBciQUbU1JqvOqClZew7Z5Y1VpCBIS1X7l8ft\"}"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-58c998.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d238ba13-3240-4240-88c6-089502615e9d","keyName":"e2e-ipp-58c998","subscription":"ipp-route-58c998-sub","tenant":"e2e-ipp-a-58c998","userId":"d238ba13-3240-4240-88c6-089502615e9d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-58c998.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998\",\"requestedSubscription\":\"ipp-route-58c998-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-58c998.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-58c998/models/facebook/opt-125m","name":"ipp-route-58c998","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-58c998-sub","namespace":"ai-tenant-e2e-ipp-a-58c998","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998"}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-58c998/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-58c998-sub"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d238ba13-3240-4240-88c6-089502615e9d","keyName":"e2e-ipp-58c998","selected_subscription":"ipp-route-58c998-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998-sub@ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-58c998/models/facebook/opt-125m","name":"ipp-route-58c998","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-58c998-sub","namespace":"ai-tenant-e2e-ipp-a-58c998","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-58c998/ipp-route-58c998"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b590943-22f8-49c7-ba86-b2f55ff0e8eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc94fc9f442af04a60244f334b4ab42495f3c29942386a8feb48435c34de2cab"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b77aff37d1bd66990b104ec043f2ae2832a57421dda687dc3b986e6f1fa6754c"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5131d38608a5e703936b88a05da885fd88032dbf9a124c19f9572507cb1ea8"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/845d26795a7fc9d868d96723fa4598a0c6c9414bf8e86dd874215042641e9404"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ab30e9a425e0e75aaa0b36412c802f1510a4c570fba7af1626d07dac2b3e1db"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2c32c2f99286f39d2e927fbf91e736d4e783f691e16c372b2f292de224c6b2"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f55f06d024691cb7b20a26f4cf80399398b54d8d1423ed75130be7d3d00e7d3"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/838431e501d1cd625c9cf8625d521f89e0a8c784a034d31d05cb181c86eddd78"} {"level":"info","ts":"2026-07-27T20:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dadb115ad5a6b3ba509d0cecc13d1f7dae437b693df17ff3106cf47c4e2d345a"} {"level":"info","ts":"2026-07-27T20:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8998590e1ffc6ce198cde3b2bf79f88dda7238c062f7f10815d8bd49401696b7"} {"level":"info","ts":"2026-07-27T20:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20da2fc24adf450e3d0d17bfa38bdc4a170b2b21c0d5698eaa44988c64e31fcf"} {"level":"info","ts":"2026-07-27T20:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97d0050306205228e617ef6264e2e94fa1d7a312ad184d823b905c1bd139edaf"}